The Monkeybread Software MBS DynaPDF Plugin is vulnerable to a stack overflow flaw that can be exploited by unauthenticated attackers to trigger a Denial of Service.

This vulnerability is a stack-based buffer overflow located in the ZBarcode_Encode function, which can be triggered by an unauthenticated attacker providing malicious input to the plugin.

Successful exploitation of this flaw results in a crash of the affected service or application, leading to a Denial of Service. With a CVSS score of 7.5, this high-severity vulnerability poses a significant risk to operational availability, as the lack of authentication requirements makes the service susceptible to remote disruption by external actors.

Immediate Action: Monitor for official security updates from Monkeybread Software and apply them as soon as a patch is released for version 21.3.1.1.

Proactive Monitoring: Review application logs for unexpected service restarts, crashes, or abnormal input patterns directed at barcode processing functions.

Compensating Controls: Implement network-level filtering or a Web Application Firewall to inspect and block malformed inputs if the plugin is exposed via a web interface.

Public Exploit Available: Yes, a published PoC exists (the vulnerability is detailed in referenced GitHub Gists).

Given the high CVSS score and the public availability of proof-of-concept material, this vulnerability should be prioritized for mitigation. IT administrators must track vendor release notes closely and deploy the necessary security patches immediately upon availability to ensure system stability and availability.