A local buffer overflow vulnerability in Verypdf docPrint Pro 8.0 allows an attacker to achieve arbitrary code execution by supplying a specially crafted payload within the password fields.

This is a structured exception handling (SEH) buffer overflow (CWE-787) triggered when the application processes oversized, alphanumeric encoded payloads in the User Password or Master Password fields. The vulnerability can be triggered by a local, unauthenticated attacker who gains the ability to interact with the application interface.

Successful exploitation of this flaw allows a local attacker to execute arbitrary code with the privileges of the application user. This could lead to a full system compromise, unauthorized data access, or the deployment of malicious software on the host machine. Given the CVSS score of 8.4, this vulnerability represents a high-severity risk that could significantly impact the integrity and confidentiality of the affected workstation.

Immediate Action: Since no official patch is currently available, users should restrict local access to the docPrint Pro application and avoid processing untrusted or suspicious PDF files that may require password entry.

Proactive Monitoring: Security teams should monitor endpoint logs for unusual application crashes, specifically those involving illegal memory access or unexpected SEH chain modifications.

Compensating Controls: Implement endpoint protection solutions that utilize memory protection features, such as Data Execution Prevention (DEP) or Address Space Layout Randomization (ASLR), to help mitigate the impact of buffer overflow attempts.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the ExploitDB entry 47394.

The presence of a functional proof-of-concept exploit makes this vulnerability a credible threat to local systems running Verypdf docPrint Pro 8.0. Administrators should immediately evaluate the necessity of this software and, if possible, uninstall it or restrict its usage to highly controlled environments until the vendor releases a security update.