CVE-2019-25550

EUVD-2019-19848
Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when importing PDF files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
verypdfencrypt_pdf
2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.verypdf.com
https://www.exploit-db.com/exploits/46871
https://www.vulncheck.com/advisories/encrypt-pdf-denial-of-service-via-buffer-overflow