PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting …

PDF Explorer version 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that enables local attackers to execute arbitrary code. The vulnerability is triggered when the Custom fields settings dialog processes malicious input in the Label field. Attackers can exploit this by crafting payloads containing buffer overflow data, NSEH jumps, and ROP gadget chains. The vulnerability allows overwriting SEH records with malicious data, leading to code execution. This represents a significant local privilege escalation risk for systems running the affected PDF Explorer version.