PT-2011-4580 · Plotsoft · Pdfill Pdf Editor

Published 2011-09-27 · Updated 2012-02-21 · CVE-2011-3690

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PlotSoft PDFill PDF Editor version 8.0

Description The issue allows local users to gain privileges through an untrusted search path vulnerability. This can be achieved by placing a Trojan horse mfc70enu.dll or mfc80loc.dll in the current working directory.

Recommendations For PlotSoft PDFill PDF Editor version 8.0, consider removing or restricting access to the vulnerable dynamic link libraries mfc70enu.dll and mfc80loc.dll to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2011-3690

Affected Products

Pdfill Pdf Editor

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-3690 · Security Note
• http://solutionary.com/index/SERT/Vuln-Disclosures/PDFill-Insecure-Library.html · Note