CVE-2022-42388

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42388

CVE-2022-42388 affects PDF-XChange Editor. The issue is in the U3D file parsing code, where crafted data can trigger a read past the end of an allocated buffer, exposing sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), and in c...

CVE-2022-42387

PDF-XChange Editor is affected by CVE-2022-42387 due to a buffer read overflow in the parsing of U3D files. The flaw allows a remote attacker who persuades a user to open a malicious file or visit a crafted page to disclose sensitive information; user interaction is required and the attacker coul...

CVE-2022-42377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42419

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain U3D files...

CVE-2022-42389

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41152

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42418

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42420

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42392

PDF-XChange Editor contains a buffer overread in U3D file parsing that can lead to information disclosure; exploitation requires user interaction (open malicious file/page). The CVE notes potential for arbitrary code execution when combined with other vulnerabilities. Red Hat/NCSC entries indicat...

CVE-2022-42385

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Tracker Software PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in Tracker Software PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...

CVE-2022-42382

The CVE-2022-42382 issue affects PDF-XChange Editor and stems from an out-of-bounds write in the U3D file parsing path, enabling remote code execution after user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction. Verified references include ZDI-22-1373 an...

CVE-2022-42413

CVE-2022-42413 affects PDF-XChange Editor. The vulnerability arises from parsing JP2 files, where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure. It requires user interaction (visiting a malicious page or opening a malicious file) and can be l...

CVE-2022-41149

PDF-XChange Editor is affected by CVE-2022-41149 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution with the target’s privileges after user interaction. Exploitation requires the user to visit a malicious page or open a m...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain EMF files...

CVE-2022-42384

CVE-2022-42384 affects PDF-XChange Editor. The root cause is in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process after user interaction (visiting a malicious pag...

CVE-2022-42391

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42412

CVE-2022-42412 affects PDF-XChange Editor. The issue is a parsing flaw in PDF handling where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, potentially arbitrary code execution in the process con...