CVE-2022-42378

PDF-XChange Editor exposes a U3D parsing overflow: crafted U3D data can trigger a write past the end of an allocated buffer, enabling remote code execution in the target process. Exploitation requires user interaction (open a malicious file or visit a malicious page). Affected product/version det...

CVE-2022-42374

PDF-XChange Editor is impacted by CVE-2022-42374. The flaw resides in the U3D file parsing path where the code fails to validate an object’s existence before performing operations, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires us...

CVE-2022-42372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain EMF files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain U3D files...

CVE-2022-42370

PDF-XChange Editor is affected by CVE-2022-42370 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling arbitrary code execution when a user opens a malicious file/page. Exploitation requires user interaction. Affected products/versions are not ex...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain U3D files...

CVE-2022-42406

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42371

PDF-XChange Editor is affected by CVE-2022-42371 due to an out-of-bounds write in the U3D file parser, enabling remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability affects the Editor’s ability to parse U3D data, with exploits capable of executing c...

CVE-2022-42403

CVE-2022-42403 affects Tracker Software PDF-XChange Editor. It is a heap-based buffer overflow in PDF parsing that can allow arbitrary code execution; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of the length of u...

CVE-2022-41151

Summary of CVE-2022-41151 (PDF-XChange Editor) : The vulnerability affects Tracker Software PDF-XChange Editor through the U3D file parsing path. Crafted U3D data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the attacker’s context. Exploitation req...

CVE-2022-42393

CVE-2022-42393 affects PDF-XChange Editor. The vulnerability is a buffer over-read in the U3D file parsing path that can be triggered by crafted U3D data, potentially allowing disclosure of sensitive information and, in conjunction with other flaws, arbitrary code execution in the current process...

CVE-2022-42385

PDF-XChange Editor is affected by CVE-2022-42385 due to a parsing flaw in U3D files that can trigger a read past the end of an allocated buffer, enabling information disclosure and, with other vulnerabilities, potential arbitrary code execution in the affected process. The issue requires user int...

CVE-2022-42388

CVE-2022-42388 affects PDF-XChange Editor. The issue is in the U3D file parsing code, where crafted data can trigger a read past the end of an allocated buffer, exposing sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), and in c...

CVE-2022-42392

PDF-XChange Editor contains a buffer overread in U3D file parsing that can lead to information disclosure; exploitation requires user interaction (open malicious file/page). The CVE notes potential for arbitrary code execution when combined with other vulnerabilities. Red Hat/NCSC entries indicat...

CVE-2022-42384

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42379

PDF-XChange Editor is affected by CVE-2022-42379 due to an out-of-bounds read in the U3D file parsing path, which can allow remote code execution. Exploitation requires user interaction (opening a malicious file or visiting a malicious page). The issue is present inTracker Software’s PDF-XChange ...

CVE-2022-42376

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42382

The CVE-2022-42382 issue affects PDF-XChange Editor and stems from an out-of-bounds write in the U3D file parsing path, enabling remote code execution after user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction. Verified references include ZDI-22-1373 an...

CVE-2022-41147

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...