10642 matches found
Heap overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42408
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42418
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-40717
The CVE-2022-40717 entry concerns D-Link DIR-2150 routers (v4.0.1) with a stack-based buffer overflow in the anweb service (listening on TCP ports 80/443) that allows unauthenticated, network-adjacent attackers to execute code as root. The root cause is improper validation of the length of user-s...
CVE-2022-41146
The CVE-2022-41146 issue affects PDF-XChange Editor. The root cause is in the U3D file parsing path, where crafted U3D data can cause a read past the end of an allocated buffer, leading to information disclosure. Exploitation requires user interaction (victim must open a malicious file or visit a...
CVE-2022-42393
CVE-2022-42393 affects PDF-XChange Editor. The vulnerability is a buffer over-read in the U3D file parsing path that can be triggered by crafted U3D data, potentially allowing disclosure of sensitive information and, in conjunction with other flaws, arbitrary code execution in the current process...
CVE-2022-41150
PDF-XChange Editor is affected by a U3D file parsing vulnerability. The issue allows remote code execution via crafted U3D data that triggers a read past the end of an allocated buffer. User interaction is required (visiting a malicious page or opening a malicious file). The root cause is in the ...
CVE-2022-42398
CVE-2022-42398 affects PDF-XChange Editor. The root cause is a parsing flaw in PDF handling that can trigger a read-past-the-end of an allocated buffer, leading to potential information disclosure and, in conjunction with other vulnerabilities, possible arbitrary code execution in the context of ...
CVE-2022-42402
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42385
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42384
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42379
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42388
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42378
PDF-XChange Editor exposes a U3D parsing overflow: crafted U3D data can trigger a write past the end of an allocated buffer, enabling remote code execution in the target process. Exploitation requires user interaction (open a malicious file or visit a malicious page). Affected product/version det...
CVE-2022-42371
PDF-XChange Editor is affected by CVE-2022-42371 due to an out-of-bounds write in the U3D file parser, enabling remote code execution when a user opens a malicious file or visits a crafted page. The vulnerability affects the Editor’s ability to parse U3D data, with exploits capable of executing c...
CVE-2022-41149
PDF-XChange Editor is affected by CVE-2022-41149 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution with the target’s privileges after user interaction. Exploitation requires the user to visit a malicious page or open a m...