CVE-2018-7264
Critical
Description
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.
SeverityCritical
CVSS9.8
Exploit probability—
ProductActivepdf Toolkit
PublishedFeb 28, 2018
First seenFeb 28, 2018
How to fix
Update
- activepdf activepdf_toolkit8.1.0.19023 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activepdf activepdf_toolkit | v < 8.1.0.19023 | 8.1.0.19023 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.