PDFsam Enhanced Remote Code Execution Vulnerability via Malicious DOC Files

A remote code execution vulnerability has been identified in PDFsam Enhanced, specifically within the processing of DOC files. This issue arises from the application allowing the execution of harmful scripts without adequate user warnings. Exploitation of this vulnerability requires user interaction, as the target must either open a malicious DOC file or visit a page containing such a file. Once exploited, the arbitrary code is executed in the context of the user.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running under the current user's privileges.

Remediation

Due to the nature of this vulnerability, the primary recommendation is to limit interactions with PDFsam Enhanced, especially regarding DOC files.