Zero Day Initiative

**Name of the Vulnerable Software and Affected Versions** PDFsam Enhanced (affected versions not specified) **Description** A flaw exists in PDFsam Enhanced related to the Launch action, allowing remote attackers to execute arbitrary code. User interaction is required, specifically the target must visit a malicious page or open a malicious file. The issue stems from the execution of dangerous scripts without providing a user warning. Successful exploitation allows an attacker to execute code within the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Soda PDF Desktop (affected versions not specified) **Description** A flaw exists in the parsing of PDF files within Soda PDF Desktop. The issue stems from insufficient validation of user-supplied data, potentially leading to a read past the end of an allocated object. An attacker could leverage this, potentially in combination with other issues, to disclose sensitive information. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger the issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.