CVE-2022-37366

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2022-37356

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37364

CVE-2022-37364 affects PDF-XChange Editor. The root cause is an out-of-bounds write when parsing EMF files, triggered by crafted EMF data that can write past the end of an allocated buffer. This enables remote code execution in the context of the current process, with user interaction required (v...

CVE-2022-37360

CVE-2022-37360 affects PDF-XChange Editor. The vulnerability stems from EMF file parsing, where crafted EMF data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, when combined with other vulnerabilities, may allow arbitrary code execution in the...

CVE-2022-37353

The CVE-2022-37353 issue affects PDF-XChange Editor and stems from the parsing of EMF files. The vulnerability is an out-of-bounds read in crafted EMF data, which can disclose sensitive information. Exploitation requires user interaction (the target must visit a malicious page or open a malicious...

CVE-2022-37361

The CVE-2022-37361 issue affects PDF-XChange Editor and stems from JP2 file parsing. A crafted JP2 payload can trigger a read past the end of an allocated buffer, enabling information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), and, ...

CVE-2022-37351

CVE-2022-37351 affects PDF-XChange Editor. The flaw is in the parsing of J2K files, where crafted data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution when combined with other vulnerabilities. Exploitation requires user interaction (visiting a...

CVE-2022-37373

PDF-XChange Editor is affected by CVE-2022-37373 due to a parsing flaw in PDF files that can trigger a read past the end of an allocated buffer. This can lead to information disclosure and, when combined with other vulnerabilities, may enable arbitrary code execution in the context of the current...

CVE-2022-37365

CVE-2022-37365 affects PDF-XChange Editor. The flaw is in the saveAs method where the application exposes a JavaScript interface that allows writing arbitrary files, enabling an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction (visiting...

CVE-2022-37358

CVE-2022-37358 affects PDF-XChange Editor. The flaw is in JPG file parsing, where crafted data can trigger a write past the end of an allocated buffer, leading to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is do...

CVE-2022-37365

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs...

CVE-2022-37368

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37354

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-37363

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of EMF files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of EMF files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing documents in PDF format from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the handling of Doc objects...

CVE-2022-37366

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2022-37372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...