CVE-2024-8830

CVE-2024-8830 concerns the PDF-XChange Editor’s handling of XPS files. The connected sources describe an out-of-bounds write in the XPS parsing path that results from insufficient validation of user-supplied data, enabling remote code execution when a user opens a malicious file or visits a craft...

CVE-2024-8830 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2024-8826 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2024-8826 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2024-8826

CVE-2024-8826 affects PDF-XChange Editor. The flaw is in parsing XPS files, caused by insufficient validation leading to an out-of-bounds read that can allow remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The sources describe...

CVE-2024-9748

CVE-2024-9748 affects Tungsten Automation Power PDF, specifically its XPS file parsing. The root cause is a failure to validate object existence before performing operations, enabling a Use-After-Free that can lead to remote code execution. Exploitation requires user interaction (visiting a malic...

CVE-2024-9748 Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

CVE-2024-9748 Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

CVE-2024-9732 Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

CVE-2024-9732

CVE-2024-9732 describes a remote code execution in Tungsten Automation Power PDF caused by a Use-After-Free in XPS file parsing. The issue stems from not validating an object's existence before performing operations, allowing an attacker who entices a target to open a malicious XPS file or visit ...

CVE-2024-9732 Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds read remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds read remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds read remote code execution vulnerability caused by a lack of proper validation of user-supplied data, which can be exploited by an attacker to execute code in the context of the...

Tungsten Automation Power PDF 资源管理错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. Tungsten Automation Power PDF suffers from a Resource Management Error vulnerability that stems from XPS file parsing containing a post-release reuse issue. An attacker could exploit...

Tungsten Automation Power PDF 资源管理错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. Tungsten Automation Power PDF suffers from a Resource Management Error vulnerability that stems from the parsing of XPS files containing a post-release reuse issue. An attacker could...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a powerful PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

PDF-XChange Editor 缓冲区错误漏洞

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor XPS file parsing has an out-of-bounds read remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

PT-2025-4097 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. It requires user interaction, where the target must visit a...

CVE-2024-9419

Client / Server PCs with the HP Smart Universal Printing Driver installed are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege. A client using the HP Smart Universal Printing Driver that sends a print job comprised of a malicious XPS file could potentially lead to...