CVE-2019-25467 - Vulnerability Analysis

Overview

Verypdf docPrint Pro 8.0 contains a buffer overflow caused by oversized alphanumeric encoded payload in User Password or Master Password fields, letting local attackers execute arbitrary code, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version of Verypdf docPrint Pro.

References

• http://dl.verypdf.net/docprint_pro_setup.exe
• http://www.verypdf.com
• https://www.exploit-db.com/exploits/47394
• https://www.vulncheck.com/advisories/verypdf-docprint-pro-local-seh-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner