CVE-2022-42389

PDF-XChange Editor contains a vulnerability in U3D file parsing where crafted data can trigger a read past the end of an allocated buffer, allowing remote disclosure of sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, in co...

CVE-2022-42385

PDF-XChange Editor is affected by CVE-2022-42385 due to a parsing flaw in U3D files that can trigger a read past the end of an allocated buffer, enabling information disclosure and, with other vulnerabilities, potential arbitrary code execution in the affected process. The issue requires user int...

CVE-2022-42398

CVE-2022-42398 affects PDF-XChange Editor. The root cause is a parsing flaw in PDF handling that can trigger a read-past-the-end of an allocated buffer, leading to potential information disclosure and, in conjunction with other vulnerabilities, possible arbitrary code execution in the context of ...

CVE-2022-41149

PDF-XChange Editor is affected by CVE-2022-41149 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution with the target’s privileges after user interaction. Exploitation requires the user to visit a malicious page or open a m...

CVE-2022-42374

PDF-XChange Editor is impacted by CVE-2022-42374. The flaw resides in the U3D file parsing path where the code fails to validate an object’s existence before performing operations, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires us...

CVE-2022-42371

PDF-XChange Editor is affected by CVE-2022-42371 due to an out-of-bounds write in the U3D file parser, enabling remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability affects the Editor’s ability to parse U3D data, with exploits capable of executing c...

CVE-2022-41146

The CVE-2022-41146 issue affects PDF-XChange Editor. The root cause is in the U3D file parsing path, where crafted U3D data can cause a read past the end of an allocated buffer, leading to information disclosure. Exploitation requires user interaction (victim must open a malicious file or visit a...

CVE-2022-40719

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpdgeneric.lua plugin for the xupnpd service, which...

CVE-2022-42385

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42405

CVE-2022-42405 affects PDF-XChange Editor, with a heap-based buffer overflow in EMF file parsing that allows remote code execution. The vulnerability requires user interaction (target must open a malicious file or visit a crafted page) and is described as a length-validation flaw on data copied i...

CVE-2022-42392

PDF-XChange Editor contains a buffer overread in U3D file parsing that can lead to information disclosure; exploitation requires user interaction (open malicious file/page). The CVE notes potential for arbitrary code execution when combined with other vulnerabilities. Red Hat/NCSC entries indicat...

CVE-2022-42379

PDF-XChange Editor is affected by CVE-2022-42379 due to an out-of-bounds read in the U3D file parsing path, which can allow remote code execution. Exploitation requires user interaction (opening a malicious file or visiting a malicious page). The issue is present inTracker Software’s PDF-XChange ...

CVE-2022-41151

Summary of CVE-2022-41151 (PDF-XChange Editor) : The vulnerability affects Tracker Software PDF-XChange Editor through the U3D file parsing path. Crafted U3D data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the attacker’s context. Exploitation req...

CVE-2022-42382

The CVE-2022-42382 issue affects PDF-XChange Editor and stems from an out-of-bounds write in the U3D file parsing path, enabling remote code execution after user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction. Verified references include ZDI-22-1373 an...

CVE-2022-41143

CVE-2022-41143 affects PDF-XChange Editor and stems from an out-of-bounds write when parsing U3D files. Crafted U3D data can cause a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a ...

CVE-2022-42388

CVE-2022-42388 affects PDF-XChange Editor. The issue is in the U3D file parsing code, where crafted data can trigger a read past the end of an allocated buffer, exposing sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), and in c...

CVE-2022-42379

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42393

CVE-2022-42393 affects PDF-XChange Editor. The vulnerability is a buffer over-read in the U3D file parsing path that can be triggered by crafted U3D data, potentially allowing disclosure of sensitive information and, in conjunction with other flaws, arbitrary code execution in the current process...

CVE-2022-41147

PDF-XChange Editor is affected by CVE-2022-41147 due to an out-of-bounds write while parsing U3D files, allowing remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability is triggered by crafted U3D data that writes past the end of an allocated buffer, e...

CVE-2022-42415

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...