← Database

CVE-2025-30057

N/A CVSS: N/A Published: 2025-08-27 Modified: 2026-06-17

Description

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.

Affected Platforms

Unknown

Weakness Type

CWE-94

References