CVE-2022-42403

CVE-2022-42403 affects Tracker Software PDF-XChange Editor. It is a heap-based buffer overflow in PDF parsing that can allow arbitrary code execution; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of the length of u...

CVE-2022-41150

PDF-XChange Editor is affected by a U3D file parsing vulnerability. The issue allows remote code execution via crafted U3D data that triggers a read past the end of an allocated buffer. User interaction is required (visiting a malicious page or opening a malicious file). The root cause is in the ...

CVE-2022-41144

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42421

PDF-XChange Editor is affected by a TIF-file parsing out-of-bounds write that enables remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction; the attacker can execute code in the context of the current process. The root cause is...

Tracker Software PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in Tracker Software PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that originates from a problem with the parsing of certain TIF files...

CVE-2022-42419

CVE-2022-42419 affects PDF-XChange Editor. The vulnerability stems from TIF file parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Sev...

CVE-2022-42373

CVE-2022-42373 affects PDF-XChange Editor. The root cause is an out-of-bounds write during parsing of U3D files, allowing remote attackers to execute arbitrary code after the user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction and runs with the current...

CVE-2022-42376

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42389

PDF-XChange Editor contains a vulnerability in U3D file parsing where crafted data can trigger a read past the end of an allocated buffer, allowing remote disclosure of sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, in co...

CVE-2022-41144

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41152

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41152

CVE-2022-41152 affects PDF-XChange Editor. The issue arises in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (the target must open a malicious page or file). Impact is exe...

CVE-2022-42378

PDF-XChange Editor exposes a U3D parsing overflow: crafted U3D data can trigger a write past the end of an allocated buffer, enabling remote code execution in the target process. Exploitation requires user interaction (open a malicious file or visit a malicious page). Affected product/version det...

CVE-2022-42404

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42388

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42387

PDF-XChange Editor is affected by CVE-2022-42387 due to a buffer read overflow in the parsing of U3D files. The flaw allows a remote attacker who persuades a user to open a malicious file or visit a crafted page to disclose sensitive information; user interaction is required and the attacker coul...

CVE-2022-42377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42419

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...