pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in pdfforge PDF Architect, specifically within the parsing of CBZ files. This issue arises from inadequate validation of user-supplied paths before they are used in file operations, allowing remote attackers to execute arbitrary code on affected installations. Exploitation of this vulnerability requires user interaction, as the target must open a malicious CBZ file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, executed in the context of the current user.

Remediation

Given the nature of the vulnerability, the recommended mitigation strategy is to limit interaction with the product.