cve/2012/CVE-2012-5324.md

CVE-2012-5324

Description

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path parameter to the StoreInRegistry function or (2) sub_key parameter to the InitFromRegistry function.

POC

Reference

• http://www.exploit-db.com/exploits/18427
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5067.php

Github

No PoCs found on GitHub currently.