ID:2720 - Exploit for Out-of-bounds read in Quick PDF Library - CVE-2018-20249

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to bypass security restrictions the target system.

The weakness exists due to out-of-bounds read when handling malicious input. A local attacker can load a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions, trigger memory corruption and bypass security restrictions to conduct for further attacks.

Remediation