What’s Vulnerable › Vulnerabilities

CVE-2018-25217: PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-26 · updated 2026-06-17
• Weakness: CWE-787

Description

PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.

Affected products

• Rttsoftware PDF Explorer: 1.5.66.2

References

• http://www.rttsoftware.com/
• https://www.exploit-db.com/exploits/46016
• https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip
• https://www.vulncheck.com/advisories/pdf-explorer-structured-exception-handler-local-code-execution

Get alerted when CVE-2018-25217 or the next vulnerability affects your stack