Tracker Software PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in Tracker Software PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...

CVE-2022-41153

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41144

PDF-XChange Editor is affected by CVE-2022-41144 due to a parsing flaw in U3D files that can trigger a write-past-end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented as ...

CVE-2022-41144

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42377

CVE-2022-42377 affects PDF-XChange Editor. The issue is a memory corruption vulnerability in the parsing of U3D files that can allow remote code execution after user interaction (visiting a malicious page or opening a crafted file). Root cause: insufficient validation of user-supplied data in U3D...

CVE-2022-42421

PDF-XChange Editor is affected by a TIF-file parsing out-of-bounds write that enables remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction; the attacker can execute code in the context of the current process. The root cause is...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain EMF files...

Tracker Software PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in Tracker Software PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that originates from a problem with the parsing of certain TIF files...

CVE-2022-42419

CVE-2022-42419 affects PDF-XChange Editor. The vulnerability stems from TIF file parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Sev...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...

CVE-2022-42404

The CVE-2022-42404 entry concerns PDF-XChange Editor: an EMF file parsing flaw that can trigger a read past the end of an allocated buffer, enabling information disclosure and potentially arbitrary code execution when combined with other vulnerabilities. The vulnerability requires user interactio...

CVE-2022-42373

CVE-2022-42373 affects PDF-XChange Editor. The root cause is an out-of-bounds write during parsing of U3D files, allowing remote attackers to execute arbitrary code after the user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction and runs with the current...

CVE-2022-42376

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42389

PDF-XChange Editor contains a vulnerability in U3D file parsing where crafted data can trigger a read past the end of an allocated buffer, allowing remote disclosure of sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, in co...

CVE-2022-42410

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42403

CVE-2022-42403 affects Tracker Software PDF-XChange Editor. It is a heap-based buffer overflow in PDF parsing that can allow arbitrary code execution; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of the length of u...

CVE-2022-41144

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41152

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...