CVE-2020-7374

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

• CWE-120
• CWE-120

• https://github.com/rapid7/metasploit-framework/pull/13517Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/rapid7/metasploit-framework/pull/13517Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Aug 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7363User Interface (UI) Misrepresentation of Critical Informatio…4.3
• CVE-2020-7364User Interface (UI) Misrepresentation of Critical Informatio…4.3
• CVE-2020-7369User Interface (UI) Misrepresentation of Critical Informatio…4.3
• CVE-2020-7370User Interface (UI) Misrepresentation of Critical Informatio…4.3
• CVE-2020-7371User Interface (UI) Misrepresentation of Critical Informatio…4.3
• CVE-2020-7373vBulletin 5.5.4 through 5.6.2 allows remote command executio…9.8
• CVE-2020-7376The Metasploit Framework module "post/osx/gather/enum_osx mo…9.8
• CVE-2020-7377The Metasploit Framework module "auxiliary/admin/http/telpho…7.5
• CVE-2020-7378CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffer…9.1
• CVE-2020-7381In Rapid7 Nexpose installer versions prior to 6.6.40, the Ne…7.8
• CVE-2020-7382Rapid7 Nexpose installer version prior to 6.6.40 contains an…6.5
• CVE-2020-7383A SQL Injection issue in Rapid7 Nexpose version prior to 6.6…8.1