pdfforge PDF Architect Remote Code Execution Vulnerability via Malicious XLS Files

A remote code execution vulnerability has been identified in pdfforge PDF Architect, specifically in the handling of XLS files. This issue arises from insufficient user interface warnings, allowing the execution of harmful scripts without notification. Exploitation of this vulnerability requires user interaction, as the target must open a malicious XLS file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, executed in the context of the current user.

Remediation

Users are advised to limit interactions with the product, especially regarding XLS files.