CVE-2022-42369

CVE-2022-42369 affects PDF-XChange Editor. The root cause is a parsing flaw in U3D file handling that can trigger a read past the end of an allocated buffer, enabling information disclosure and potentially arbitrary code execution when combined with other vulnerabilities. Exploitation requires us...

CVE-2022-42371: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41151

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42377

CVE-2022-42377 affects PDF-XChange Editor. The issue is a memory corruption vulnerability in the parsing of U3D files that can allow remote code execution after user interaction (visiting a malicious page or opening a crafted file). Root cause: insufficient validation of user-supplied data in U3D...

CVE-2022-42373: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42393: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42388: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42379: Out-of-bounds Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42382: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41148: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42394: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41148

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41149

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42394

CVE-2022-42394 affects PDF-XChange Editor. The vulnerability stems from the parsing of U3D files, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (visitin...

CVE-2022-42377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42378

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41150

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42375

CVE-2022-42375 affects PDF-XChange Editor. The issue stems from parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially allowing an attacker to disclose sensitive information and, with other vulnerabilities, execute arbitrary code in the curren...

CVE-2022-42373

CVE-2022-42373 affects PDF-XChange Editor. The root cause is an out-of-bounds write during parsing of U3D files, allowing remote attackers to execute arbitrary code after the user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction and runs with the current...

CVE-2022-42387

PDF-XChange Editor is affected by CVE-2022-42387 due to a buffer read overflow in the parsing of U3D files. The flaw allows a remote attacker who persuades a user to open a malicious file or visit a crafted page to disclose sensitive information; user interaction is required and the attacker coul...