Vulnerability Spotlight: Iceni Infix PDF Editor Memory Corruption

Summary: Cisco Talos disclosed TALOS-2017-0367 (CVE-2017-2863), an out-of-bounds write in Iceni Infix PDF Editor's PDF parsing functionality that could allow arbitrary code execution on affected hosts. Exploitation requires a user to open a specifically crafted PDF file, most likely delivered through a social engineering email, and Iceni has released a software update while Talos issued Snort rules 43212-43213 to detect exploit attempts.
What's compelling: The attack path is an emailed PDF opened by a user, so the patch from Iceni and the Snort signatures are only useful if they reach the endpoints and network sensors before a crafted document does.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2017-2863
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026