A local buffer overflow vulnerability in docPrint Pro 8.0 allows an attacker to execute arbitrary code with system privileges through a maliciously crafted URL input.

The application is susceptible to a stack-based buffer overflow (CWE-121) within the Add URL function. By providing a specifically crafted input, an unauthenticated local user can overwrite the structured exception handler (SEH) to redirect execution flow and trigger arbitrary shellcode.

Successful exploitation of this vulnerability permits an attacker to gain unauthorized control over the host system, potentially leading to a full compromise of local data and system integrity. Given the CVSS score of 8.4, this flaw presents a high risk to business operations, as it allows for persistent access and potential lateral movement within the network if the affected machine is part of a larger infrastructure.

Immediate Action: There is no vendor-provided patch for this legacy version; users should immediately discontinue the use of docPrint Pro 8.0 and migrate to a supported, secure alternative.

Proactive Monitoring: Security teams should monitor endpoint logs for suspicious child processes spawning from the doc2pdf_win.exe executable or unexpected memory access violations.

Compensating Controls: Implement strict application whitelisting and use Endpoint Detection and Response (EDR) solutions to identify and block the execution of shellcode patterns associated with known buffer overflow exploits.

Public Exploit Available: Yes, a functional exploit exists as documented in the Exploit Database (EDB-ID: 49100).

This vulnerability represents a significant security risk due to the availability of a public exploit targeting a memory corruption flaw. Organizations currently utilizing docPrint Pro 8.0 must prioritize the immediate removal or replacement of this software, as it is no longer maintained and remains inherently vulnerable to remote code execution.