PT-2025-29548 · Unknown · Pdftools.Exe+2

Metacom · Published 2025-07-15 · Updated 2025-07-15 · CVE-2025-34106

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions PDF Shaper versions 3.5 and 3.6

Description A buffer overflow exists when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this by tricking a user into opening a malicious PDF file, potentially leading to arbitrary code execution under the user's context. This has been verified on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component.

Recommendations PDF Shaper version 3.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability. PDF Shaper version 3.6: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-34106

Affected Products

Pdf Shaper 3.5

Pdf Shaper 3.6

Pdftools.Exe

References · 8

• 🔥 https://exploit-db.com/exploits/37760 · Exploit
• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/shaper_pdf_bof.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34106 · Security Note
• https://pdfshaper.com · Note
• https://twitter.com/CVEnew/status/1945118956903391336 · Twitter Post
• https://vulncheck.com/advisories/pdf-shaper-buffer-overflow-via-convert-to-image-feature · Note
• https://twitter.com/VulmonFeeds/status/1945128536697700462 · Twitter Post
• https://vulners.com/vulnerlab/VULNERABLE:1579 · Note