CVE-2022-42410

CVE-2022-42410 affects PDF-XChange Editor. The flaw is an out-of-bounds write in parsing of PGM files, enabling remote code execution when a user opens a crafted PGM file or visits a malicious page. Requires user interaction; attack vector is local (per CVSS context) but remote code execution in ...

CVE-2022-42377

CVE-2022-42377 affects PDF-XChange Editor. The issue is a memory corruption vulnerability in the parsing of U3D files that can allow remote code execution after user interaction (visiting a malicious page or opening a crafted file). Root cause: insufficient validation of user-supplied data in U3D...

CVE-2022-41145

CVE-2022-41145 affects Tracker Software PDF-XChange Editor. The flaw is in parsing U3D files and can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, arbitrary code execution in the target process. Exploitation req...

CVE-2022-42386

CVE-2022-42386 affects PDF-XChange Editor. The issue resides in the U3D file parsing code and can trigger a read past the end of an allocated buffer, allowing an information disclosure and potentially enabling arbitrary code execution when combined with other vulnerabilities. Exploitation require...

CVE-2022-42404

The CVE-2022-42404 entry concerns PDF-XChange Editor: an EMF file parsing flaw that can trigger a read past the end of an allocated buffer, enabling information disclosure and potentially arbitrary code execution when combined with other vulnerabilities. The vulnerability requires user interactio...

CVE-2022-42372

PDF-XChange Editor is affected by a U3D file parsing buffer over-read vulnerability that allows remote code execution with user interaction (visiting a malicious page or opening a malicious file). Root cause: crafted U3D data can trigger read past end of allocated memory, enabling code execution ...

CVE-2022-41142

The CVE-2022-41142 vulnerability affects Centreon and is a SQL injection flaw in how poller resource configuration requests are processed. The root cause is insufficient validation of a user-supplied string used to construct SQL queries, enabling an attacker who can authenticate to escalate privi...

CVE-2022-42395

CVE-2022-42395 affects PDF-XChange Editor via a buffer overrun in XPS parsing that permits remote code execution after user interaction. Root cause: crafted XPS data causing write past end of allocated buffer. Exploitation tied to ZDI-18274. CVSS v3.1 base score 7.8 (HIGH). Remediation: update to...

CVE-2022-42412

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42397

CVE-2022-42397 affects PDF-XChange Editor. The issue lies in the XPS file parsing code, where crafted XPS data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process. Exploitation requires user interaction (the t...

CVE-2022-42396

CVE-2022-42396 affects PDF-XChange Editor. The flaw, in the XPS file parsing path, stems from inadequate validation of a user-supplied value before dereferencing a pointer, enabling arbitrary code execution when a user opens a malicious file or visits a malicious page. The vulnerability requires ...

CVE-2022-41144

PDF-XChange Editor is affected by CVE-2022-41144 due to a parsing flaw in U3D files that can trigger a write-past-end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented as ...

CVE-2022-42417

PDF-XChange Editor is affected by CVE-2022-42417, a vulnerability in the parsing of TIF files that can trigger a read past the end of an allocated buffer, allowing remote code execution in the context of the current process. Exploitation requires user interaction (the target must open a malicious...

CVE-2022-42377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42399

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42406

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42400

PDF-XChange Editor is affected by CVE-2022-42400 due to a PDF parsing vulnerability that can write past the end of an allocated buffer, enabling code execution. The attack requires user interaction (visiting a malicious page or opening a malicious file) and is exploitable via crafted PDF data; th...

CVE-2022-42406

Summary (CVE-2022-42406) : PDF-XChange Editor is affected by a vulnerability in EMF file parsing that can trigger a read past the end of an allocated buffer, allowing sensitive information disclosure. Exploitation requires user interaction (target must visit a malicious page or open a malicious f...

CVE-2022-42369

CVE-2022-42369 affects PDF-XChange Editor. The root cause is a parsing flaw in U3D file handling that can trigger a read past the end of an allocated buffer, enabling information disclosure and potentially arbitrary code execution when combined with other vulnerabilities. Exploitation requires us...