unidocs ezPDFReader arbitrary command execution vulnerability
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.5epss 1.0%
da publicação à arma
Publicada no NVD5 de ago.
VulnCheck+82d
probabilidade de exploração
1.0%top 37% das CVEs
exploração observada
simVulnCheck
An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. This issue occurred when the ezPDF launcher received and executed crafted input values through JSON-RPC communication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
unidocs · ezPDFReader