CVE-2012-5324: Buffer Overflow

Published Oct 8, 2012

Updated

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) subpath parameter to the StoreInRegistry function or (2) subkey parameter to the InitFromRegistry function.

Affected Software

1 affected component

Tracker-software Pdf-xchange=3.60.0128

Event History

Oct 8, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5324?

CVE-2012-5324 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2012-5324?

To mitigate CVE-2012-5324, upgrade to a patched version of PDF-XChange that addresses the buffer overflow issues.

What systems are affected by CVE-2012-5324?

CVE-2012-5324 affects Tracker Software PDF-XChange version 3.60.0128.

What type of vulnerability is CVE-2012-5324?

CVE-2012-5324 is a buffer overflow vulnerability found in the Pdf Printer Preferences ActiveX Control.

Can CVE-2012-5324 be exploited remotely?

Yes, CVE-2012-5324 can be exploited remotely through specially crafted input parameters.