PDFsam Enhanced Insufficient UI Warning Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in PDFsam Enhanced. This issue arises from the Launch action implementation, which allows the execution of harmful scripts without proper user notification. Exploitation requires user interaction, such as visiting a malicious webpage or opening a harmful file. Once exploited, the executed code runs in the context of the user.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running under the current user's privileges.

Remediation

Due to the nature of this vulnerability, the primary recommendation is to limit interactions with the product.