CVE-2023-39501

PDF-XChange Editor is affected by an OXPS file parsing vulnerability caused by dereferencing an unvalidated user-supplied value, enabling remote code execution when a user opens a malicious OXPS file or visits a malicious page. The flaw, described by ZDI as ZDI-23-1135, requires user interaction ...

CVE-2023-39500 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39500

CVE-2023-39500 affects PDF-XChange Editor. The issue is in JPG file parsing, caused by improper validation that can cause an out-of-bounds write, enabling arbitrary code execution in the process context. Exploitation requires user interaction (the target must open a malicious file or visit a mali...

CVE-2023-39500 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39499

Summary of CVE-2023-39499 : A vulnerability in PDF-XChange Editor allows a JPG file parsing out-of-bounds write that can enable remote code execution. The flaw arises from insufficient validation of user-supplied data during JPG parsing, potentially writing past the end of an allocated object. Ex...

CVE-2023-39498 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39499 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39498 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39499 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39498

CVE-2023-39498 affects PDF-XChange Editor. A flaw in parsing JPG files leads to an out-of-bounds write, allowing arbitrary code execution in the affected process. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file). The issue is caused by inadequate...

CVE-2023-39497

PDF-XChange Editor is affected by a JPG File Parsing Out-of-Bounds Write Remote Code Execution vulnerability. The flaw stems from insufficient validation during JPG parsing, allowing a write past the end of an allocated object and enabling code execution in the context of the current process. Exp...

CVE-2023-39497 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39497 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39496

PDF-XChange Editor is affected by a TIF file parsing out-of-bounds read that enables remote code execution. The flaw occurs during parsing of TIF data; crafted files can trigger a read past the end of an allocated buffer, allowing an attacker to execute code in the process context. Exploitation r...

CVE-2023-39496 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2023-39495 PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability

PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that t...

CVE-2023-39495 PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability

PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that t...

CVE-2023-39495

The CVE-2023-39495 issue affects PDF-XChange Editor and stems from readFileIntoStream exposing a dangerous function, enabling information disclosure in the current user context. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ZDI advisory confir...

CVE-2023-39494 PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-39494

CVE-2023-39494 affects PDF-XChange Editor: a heap-based buffer overflow in the OXPS file parsing, caused by insufficient validation of the length of user-supplied data prior to copying into a fixed‑size heap buffer. This can lead to arbitrary code execution in the current process when a user open...