CVE-2018-25217

HIGH

PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-25217. PoCs published by Achilles.

AI-analyzed exploit summary This exploit leverages a SEH (Structured Exception Handler) overflow in PDF Explorer 1.5.66.2 to achieve arbitrary code execution. The payload overwrites the SEH chain with a custom handler and includes shellcode generated by msfvenom to spawn a calculator.

Description

PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.

Exploits (1)

exploitdb WORKING POC

by Achilles · pythonlocalwindows

https://www.exploit-db.com/exploits/46016

View Code ZIP pw:eip

This exploit leverages a SEH (Structured Exception Handler) overflow in PDF Explorer 1.5.66.2 to achieve arbitrary code execution. The payload overwrites the SEH chain with a custom handler and includes shellcode generated by msfvenom to spawn a calculator.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: PDF Explorer 1.5.66.2

No auth needed

Prerequisites: Python to generate the payload · User interaction to paste the payload into the 'Custom fields settings' dialog

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Apr 08, 2026 Full analysis →

References (4)

Core 4

Core References

Exploit exploit

ExploitDB-46016

https://www.exploit-db.com/exploits/46016

Product product

Official Product Homepage

http://www.rttsoftware.com/

Product product

Product Reference

https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip

Third Party Advisory third-party-advisory

VulnCheck Advisory: PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution

https://www.vulncheck.com/advisories/pdf-explorer-structured-exception-handler-local-code-execution

Scores

CVSS v3 8.4

EPSS 0.0022

EPSS Percentile 12.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (2)

Rttsoftware/PDF Explorer 1.5.66.2

rttsoftware/pdf_explorer 1.5.66.2

Published Mar 26, 2026

Tracked Since Mar 26, 2026