CVE-2022-42370

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41146

The CVE-2022-41146 issue affects PDF-XChange Editor. The root cause is in the U3D file parsing path, where crafted U3D data can cause a read past the end of an allocated buffer, leading to information disclosure. Exploitation requires user interaction (victim must open a malicious file or visit a...

CVE-2022-42393

CVE-2022-42393 affects PDF-XChange Editor. The vulnerability is a buffer over-read in the U3D file parsing path that can be triggered by crafted U3D data, potentially allowing disclosure of sensitive information and, in conjunction with other flaws, arbitrary code execution in the current process...

CVE-2022-41152

CVE-2022-41152 affects PDF-XChange Editor. The issue arises in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (the target must open a malicious page or file). Impact is exe...

CVE-2022-42382

The CVE-2022-42382 issue affects PDF-XChange Editor and stems from an out-of-bounds write in the U3D file parsing path, enabling remote code execution after user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction. Verified references include ZDI-22-1373 an...

CVE-2022-42370

PDF-XChange Editor is affected by CVE-2022-42370 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling arbitrary code execution when a user opens a malicious file/page. Exploitation requires user interaction. Affected products/versions are not ex...

CVE-2022-41143: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42392: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41152: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42385

PDF-XChange Editor is affected by CVE-2022-42385 due to a parsing flaw in U3D files that can trigger a read past the end of an allocated buffer, enabling information disclosure and, with other vulnerabilities, potential arbitrary code execution in the affected process. The issue requires user int...

CVE-2022-42383: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42387: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42392

PDF-XChange Editor contains a buffer overread in U3D file parsing that can lead to information disclosure; exploitation requires user interaction (open malicious file/page). The CVE notes potential for arbitrary code execution when combined with other vulnerabilities. Red Hat/NCSC entries indicat...

CVE-2022-42379

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41149

PDF-XChange Editor is affected by CVE-2022-41149 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution with the target’s privileges after user interaction. Exploitation requires the user to visit a malicious page or open a m...

CVE-2022-42372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41146: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42392

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41143

CVE-2022-41143 affects PDF-XChange Editor and stems from an out-of-bounds write when parsing U3D files. Crafted U3D data can cause a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a ...

CVE-2022-42371

PDF-XChange Editor is affected by CVE-2022-42371 due to an out-of-bounds write in the U3D file parser, enabling remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability affects the Editor’s ability to parse U3D data, with exploits capable of executing c...