PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain PDF files...

CVE-2022-42414

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42403

CVE-2022-42403 affects Tracker Software PDF-XChange Editor. It is a heap-based buffer overflow in PDF parsing that can allow arbitrary code execution; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of the length of u...

CVE-2022-42401

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42412

CVE-2022-42412 affects PDF-XChange Editor. The issue is a parsing flaw in PDF handling where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, potentially arbitrary code execution in the process con...

CVE-2022-42398

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42412

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42402

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42400

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42409

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

Stack overflow

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

Memory corruption

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-3161

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-3161

CVE-2022-3161 describes a memory corruption vulnerability in the APDFL.dll used by Siemens JT2Go and Teamcenter Visualization when parsing specially crafted PDF files. The underlying issue is a memory corruption in APDFL.dll that could allow code to execute in the attacker’s context. Affected pro...

CVE-2022-3160

CVE-2022-3160 concerns a heap-based out-of-bounds write in APDFL.dll when parsing specially crafted PDF files, enabling potential code execution in the caller process. Affected products: Siemens JT2Go (all versions prior to 14.1.0.5) and Teamcenter Visualization (various versions prior to 13.3.0....

CVE-2022-3160

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...

PT-2022-6393 · Siemens · Teamcenter Visualization

Name of the Vulnerable Software and Affected Versions: APDFL.dll affected versions not specified Description: The issue is related to a stack-based buffer overflow in the APDFL.dll, which can be triggered by parsing specially crafted PDF files. This could allow an attacker to execute code in the...