Structured Exception Handler Overflow Vulnerability in PDF Explorer by RTT Software
CVE-2018-25217
Key Information:
- Vendor
Rttsoftware
- Status
- Vendor
- CVE Published:
- 26 March 2026
Badges
What is CVE-2018-25217?
PDF Explorer version 1.5.66.2 is susceptible to an SEH overflow vulnerability that enables local attackers to execute arbitrary code. By exploiting this vulnerability, attackers can manipulate the structured exception handling records, allowing them to overwrite critical data. The attack involves crafting a specific payload with a buffer overflow, non-sequential exception handling (NSEH) jump, and return-oriented programming (ROP) gadget chains, which are executed when the Custom fields settings dialog improperly processes malicious input entered in the Label field. This flaw poses significant risks for users of the affected software and highlights the need for timely patching and system security measures.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
PDF Explorer 1.5.66.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved