CVE-2022-41143

CVE-2022-41143 affects PDF-XChange Editor and stems from an out-of-bounds write when parsing U3D files. Crafted U3D data can cause a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a ...

CVE-2022-42413: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41146

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41143

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42417

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42384

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42421

PDF-XChange Editor is affected by a TIF-file parsing out-of-bounds write that enables remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction; the attacker can execute code in the context of the current process. The root cause is...

CVE-2022-42380

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42421

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42400

PDF-XChange Editor is affected by CVE-2022-42400 due to a PDF parsing vulnerability that can write past the end of an allocated buffer, enabling code execution. The attack requires user interaction (visiting a malicious page or opening a malicious file) and is exploitable via crafted PDF data; th...

CVE-2022-42398

CVE-2022-42398 affects PDF-XChange Editor. The root cause is a parsing flaw in PDF handling that can trigger a read-past-the-end of an allocated buffer, leading to potential information disclosure and, in conjunction with other vulnerabilities, possible arbitrary code execution in the context of ...

CVE-2022-42401

Affected software: PDF-XChange Editor (Tracker Software). Vulnerability: PDF parsing reads past end of allocated buffer, enabling information disclosure; may be combined with other flaws to execute code in the current process. Remote attackers exploit via malicious PDF sent on a page/file; user i...

CVE-2022-42397

CVE-2022-42397 affects PDF-XChange Editor. The issue lies in the XPS file parsing code, where crafted XPS data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process. Exploitation requires user interaction (the t...

CVE-2022-42396

CVE-2022-42396 affects PDF-XChange Editor. The flaw, in the XPS file parsing path, stems from inadequate validation of a user-supplied value before dereferencing a pointer, enabling arbitrary code execution when a user opens a malicious file or visits a malicious page. The vulnerability requires ...

CVE-2022-42390

PDF-XChange Editor (Tracker Software) is affected by CVE-2022-42390 due to improper parsing of U3D files, causing an out-of-bounds read that can disclose sensitive information. The vulnerability requires user interaction (visiting a malicious page or opening a crafted file) and may enable arbitra...

CVE-2022-42383

The CVE-2022-42383 issue affects PDF-XChange Editor and stems from a flaw in parsing U3D files. The vulnerability allows remote disclosure of sensitive information by triggering a read past the end of an allocated buffer when processing crafted U3D data, with user interaction required (visiting a...

CVE-2022-42381

CVE-2022-42381 affects Tracker Software PDF-XChange Editor. The flaw is in the parsing of U3D files, where crafted data can cause a write past the end of an allocated buffer, enabling remote code execution. User interaction is required (the target must open a malicious page/file). The issue is do...

CVE-2022-42392

PDF-XChange Editor contains a buffer overread in U3D file parsing that can lead to information disclosure; exploitation requires user interaction (open malicious file/page). The CVE notes potential for arbitrary code execution when combined with other vulnerabilities. Red Hat/NCSC entries indicat...

CVE-2022-42379

PDF-XChange Editor is affected by CVE-2022-42379 due to an out-of-bounds read in the U3D file parsing path, which can allow remote code execution. Exploitation requires user interaction (opening a malicious file or visiting a malicious page). The issue is present inTracker Software’s PDF-XChange ...

CVE-2022-41153

CVE-2022-41153 affects PDF-XChange Editor (Tracker Software). The issue resides in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer in the U3D parser, leading to information disclosure. The vulnerability’s documented impact includes potential arb...