CVE-2022-37366

PDF-XChange Editor is affected by CVE-2022-37366 due to a buffer/out-of-bounds read in the handling of Doc objects. The flaw can be triggered by JavaScript actions and requires user interaction (target visits a malicious page or opens a malicious file), potentially enabling remote code execution ...

CVE-2022-37349

CVE-2022-37349 concerns PDF-XChange Editor. The issue is a buffer over-read in the submitForm method that can be triggered via JavaScript when a user visits a malicious page or opens a malicious file, allowing remote code execution in the context of the current process. Details come from ZDI-22-1...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. PDF-XChange Editor suffers from a buffer error vulnerability that originates from a buffer overflow problem in the parsing of WMF files...

CVE-2022-37374

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37369

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of PDF files...

CVE-2022-37363

PDF-XChange Editor is affected by an EMF parsing bug that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). The vulnerability is documented across multiple sources (...

CVE-2022-37350

CVE-2022-37350 affects PDF-XChange Editor. The root cause is a vulnerability in the handling of Collab objects, where performing actions in JavaScript can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation require...

CVE-2022-37359

PDF-XChange Editor is affected by a J2K file parsing use-after-free vulnerability that allows remote code execution with user interaction (target must open a malicious file or visit a malicious page). The root cause is a lack of validation for the existence of objects before operations, enabling ...

CVE-2022-37374

PDF-XChange Editor is affected by a PNG file parsing use-after-free vulnerability (CVE-2022-37374). The issue stems from validating the existence of an object before performing operations during PNG parsing, enabling remote code execution when a user visits a malicious page or opens a crafted fil...

CVE-2022-37362

CVE-2022-37362 affects PDF-XChange Editor. The root cause is a buffer over-read/write in the PNG parsing path that can trigger arbitrary code execution when a user opens a malicious PNG or visits a malicious page, with exploitation requiring user interaction. Connected documents confirm the vulne...

CVE-2022-37369

CVE-2022-37369 affects PDF-XChange Editor. Connected sources confirm a PDF parsing flaw that can trigger a write past the end of an allocated buffer, enabling remote code execution when a user opens a malicious PDF or visits a malicious page. The vulnerability requires user interaction. Root caus...

CVE-2022-37375

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37356

PDF-XChange Editor is affected by a JPG parser out-of-bounds write that allows remote code execution. The flaw arises when parsing JPG data, with crafted files triggering a write past the end of an allocated buffer. Exploitation requires user interaction (visiting a malicious page or opening a ma...

CVE-2022-37352

PDF-XChange Editor is affected by a WMF parsing flaw that can trigger a read past the end of an allocated buffer. This vulnerability may allow remote disclosure of sensitive information and, when combined with other vulnerabilities, could enable arbitrary code execution in the context of the curr...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. PDF-XChange Editor suffers from a buffer error vulnerability that originates from a buffer overflow problem in the parsing of JPG files...

CVE-2022-37357

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37356

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37350

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...