CVE-2020-7374

HIGH 7.8CVE-2020-7374 · Published 12/08/2020 · updated 17/06/2026

In short

CVE-2020-7374 is a HIGH (CVSS 7.8) vulnerability affecting free pdf editor (documalis), free pdf scanner (documalis).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
free pdf editor documalis	`= 5.7.2.26`	No fix yet
free pdf scanner documalis	`= 5.7.2.122`	No fix yet

Description

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

References

rapid7/metasploit-framework#13517 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free