CVE-2022-37352

PDF-XChange Editor is affected by a WMF parsing flaw that can trigger a read past the end of an allocated buffer. This vulnerability may allow remote disclosure of sensitive information and, when combined with other vulnerabilities, could enable arbitrary code execution in the context of the curr...

CVE-2022-37363

PDF-XChange Editor is affected by an EMF parsing bug that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). The vulnerability is documented across multiple sources (...

PDF-XChange Editor 安全漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software Canada. A security vulnerability exists in PDF-XChange Editor, which originates from a JavaScript interface to the saveAs method that can edit arbitrary files...

CVE-2022-37364

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37375

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37362

CVE-2022-37362 affects PDF-XChange Editor. The root cause is a buffer over-read/write in the PNG parsing path that can trigger arbitrary code execution when a user opens a malicious PNG or visits a malicious page, with exploitation requiring user interaction. Connected documents confirm the vulne...

CVE-2022-37349

CVE-2022-37349 concerns PDF-XChange Editor. The issue is a buffer over-read in the submitForm method that can be triggered via JavaScript when a user visits a malicious page or opens a malicious file, allowing remote code execution in the context of the current process. Details come from ZDI-22-1...

CVE-2022-37358

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37354

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 资源管理错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. PDF-XChange Editor suffers from a resource management error vulnerability that stems from a validation flaw in the parsing of J2K files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. PDF-XChange Editor suffers from a buffer error vulnerability that originates from a buffer overflow problem in the parsing of JPG files...

CVE-2022-37367

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2022-37351

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37374

PDF-XChange Editor is affected by a PNG file parsing use-after-free vulnerability (CVE-2022-37374). The issue stems from validating the existence of an object before performing operations during PNG parsing, enabling remote code execution when a user visits a malicious page or opens a crafted fil...

CVE-2022-37359

PDF-XChange Editor is affected by a J2K file parsing use-after-free vulnerability that allows remote code execution with user interaction (target must open a malicious file or visit a malicious page). The root cause is a lack of validation for the existence of objects before operations, enabling ...

CVE-2022-37360

CVE-2022-37360 affects PDF-XChange Editor. The vulnerability stems from EMF file parsing, where crafted EMF data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, when combined with other vulnerabilities, may allow arbitrary code execution in the...

CVE-2022-37363

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of PNG files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from a buffer overflow problem in the parsing of ICO files...

CVE-2022-37356

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...