Vulnerability Spotlight: Remote code execution bug in Antenna House Rainbow PDF Office document converter
Summary: Cisco Talos researcher Emmanuel Tacheau found a buffer overflow in Antenna House's Rainbow PDF Office Server Document Converter, version 7.0 Pro MR1 (7.0.2019.0220), triggered when the software converts a PowerPoint document. The TxMasterStyleAtom::parse function incorrectly checks the bounds for the number of style levels, overwriting a vtable pointer and allowing an attacker to execute code remotely; Talos confirmed the Linux64 build is affected and worked with Antenna House on an update, with Snort rules 42076 and 42077 released to detect exploitation attempts.
What you should know: A document converter that sits on a server and opens untrusted Office files is a direct path from a malicious PowerPoint to remote code execution on the host, and the fix depends on customers applying Antenna House's update rather than on any network control.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5030
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026