CVE-2012-5324

Tracker Software PDF-XChange <3.60.0128 - Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-5324. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in Tracker Software pdfSaver ActiveX (pdfxctrl.dll) via the StoreInRegistry and InitFromRegistry functions, leading to SEH overwrite and potential arbitrary code execution.

Description

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path parameter to the StoreInRegistry function or (2) sub_key parameter to the InitFromRegistry function.

Exploits (1)

exploitdb WORKING POC

by LiquidWorm · textdoswindows

https://www.exploit-db.com/exploits/18427

View Code ZIP pw:eip

This exploit demonstrates a stack-based buffer overflow in Tracker Software pdfSaver ActiveX (pdfxctrl.dll) via the StoreInRegistry and InitFromRegistry functions, leading to SEH overwrite and potential arbitrary code execution.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Tracker Software pdfSaver ActiveX 3.60.0128 (pdfxctrl.dll)

No auth needed

Prerequisites: Victim must have the vulnerable ActiveX control installed and enabled in a browser · Attacker must deliver the malicious HTML/JS to the victim

MITRE ATT&CK

T1210 - Exploitation of Remote Services T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →