CVE-2018-25217

8.6 highEPSS 0.2%

PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rttsoftware:pdf_explorer

References

http://www.rttsoftware.com/
https://www.exploit-db.com/exploits/46016
https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip
https://www.vulncheck.com/advisories/pdf-explorer-structured-exception-handler-local-code-execution

Check your stack JSON