Win2PDF Not Affected by Log4j Remote Code Execution Vulnerability

Just a quick note since we’ve received several questions about the recent Log4j exploit and the alarm its causing in IT departments around the world.

Question:

The Apache Software Foundation has released a security advisory to address a remote code execution vulnerability (CVE-2021-44228) affecting Log4j versions 2.0-beta9 to 2.14.1.

A remote attacker could exploit this vulnerability to take control of an affected system. Log4j is an open-source, Java-based logging utility widely used by enterprise applications and cloud services.

Does win2PDF use this software? 

Answer:

No. Win2PDF does not use Java or Log4j.

Win2PDF is not vulnerable to CVE-2021-44228.