title: Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow
description: Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.
problem types: CWE-120 Buffer Overflow
affected:
{
product: Free PDF Editor
vendor: Documalis
versions:
status: affected, version: 5.7.2.26
}
{
product: Free PDF Scanner
vendor: Documalis
versions:
status: affected, version: 5.7.2.122
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
version: 3.1
]