CVE-2022-42389

PDF-XChange Editor contains a vulnerability in U3D file parsing where crafted data can trigger a read past the end of an allocated buffer, allowing remote disclosure of sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, in co...

CVE-2022-42370

PDF-XChange Editor is affected by CVE-2022-42370 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling arbitrary code execution when a user opens a malicious file/page. Exploitation requires user interaction. Affected products/versions are not ex...

CVE-2022-41151

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42379

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42391

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42374

PDF-XChange Editor is impacted by CVE-2022-42374. The flaw resides in the U3D file parsing path where the code fails to validate an object’s existence before performing operations, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires us...

CVE-2022-41149

PDF-XChange Editor is affected by CVE-2022-41149 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution with the target’s privileges after user interaction. Exploitation requires the user to visit a malicious page or open a m...

CVE-2022-42379

PDF-XChange Editor is affected by CVE-2022-42379 due to an out-of-bounds read in the U3D file parsing path, which can allow remote code execution. Exploitation requires user interaction (opening a malicious file or visiting a malicious page). The issue is present inTracker Software’s PDF-XChange ...

CVE-2022-42403

CVE-2022-42403 affects Tracker Software PDF-XChange Editor. It is a heap-based buffer overflow in PDF parsing that can allow arbitrary code execution; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of the length of u...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain U3D files...

CVE-2022-42398

CVE-2022-42398 affects PDF-XChange Editor. The root cause is a parsing flaw in PDF handling that can trigger a read-past-the-end of an allocated buffer, leading to potential information disclosure and, in conjunction with other vulnerabilities, possible arbitrary code execution in the context of ...

CVE-2022-41147

PDF-XChange Editor is affected by CVE-2022-41147 due to an out-of-bounds write while parsing U3D files, allowing remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability is triggered by crafted U3D data that writes past the end of an allocated buffer, e...

CVE-2022-42393

CVE-2022-42393 affects PDF-XChange Editor. The vulnerability is a buffer over-read in the U3D file parsing path that can be triggered by crafted U3D data, potentially allowing disclosure of sensitive information and, in conjunction with other flaws, arbitrary code execution in the current process...

CVE-2022-41151

Summary of CVE-2022-41151 (PDF-XChange Editor) : The vulnerability affects Tracker Software PDF-XChange Editor through the U3D file parsing path. Crafted U3D data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the attacker’s context. Exploitation req...

CVE-2022-42421

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42378

PDF-XChange Editor exposes a U3D parsing overflow: crafted U3D data can trigger a write past the end of an allocated buffer, enabling remote code execution in the target process. Exploitation requires user interaction (open a malicious file or visit a malicious page). Affected product/version det...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain XPS files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain XPS files...

CVE-2022-42379

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...