CVE-2022-42384

CVE-2022-42384 affects PDF-XChange Editor. The root cause is in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process after user interaction (visiting a malicious pag...

CVE-2022-42376

CVE-2022-42376 affects Tracker Software’s PDF-XChange Editor . The flaw resides in the parsing of U3D files , where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure. User interaction is required (open a malicious file/page). Exploitation could l...

CVE-2022-41145

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42407

CVE-2022-42407 affects PDF-XChange Editor. The issue is an EMF file parsing flaw that can trigger a read past the end of an allocated buffer, enabling information disclosure. Affected: PDF-XChange Editor; root cause: EMF parsing in filters; impact: local/remote disclosure with potential for code ...

CVE-2022-42418

CVE-2022-42418 affects PDF-XChange Editor. The vulnerability lies in the parsing of TIF files, due to inadequate validation of a user-supplied value before dereferencing it as a pointer, enabling remote code execution with user interaction required. Exploitation details are documented in ZDI-22-1...

CVE-2022-42412

CVE-2022-42412 affects PDF-XChange Editor. The issue is a parsing flaw in PDF handling where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, potentially arbitrary code execution in the process con...

CVE-2022-42411

CVE-2022-42411 affects PDF-XChange Editor. The issue stems from parsing of JPC files, where crafted JPC data can trigger a read past the end of an allocated buffer, enabling information disclosure. Exploitation requires user interaction (target must visit a malicious page or open a malicious file...

CVE-2022-42390

PDF-XChange Editor (Tracker Software) is affected by CVE-2022-42390 due to improper parsing of U3D files, causing an out-of-bounds read that can disclose sensitive information. The vulnerability requires user interaction (visiting a malicious page or opening a crafted file) and may enable arbitra...

CVE-2022-42401

Affected software: PDF-XChange Editor (Tracker Software). Vulnerability: PDF parsing reads past end of allocated buffer, enabling information disclosure; may be combined with other flaws to execute code in the current process. Remote attackers exploit via malicious PDF sent on a page/file; user i...

CVE-2022-41148

The CVE-2022-41148 issue affects PDF-XChange Editor and stems from a parsing flaw in U3D files that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Affected sof...

CVE-2022-40717

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-42380

CVE-2022-42380 affects PDF-XChange Editor. The root cause is an out-of-bounds write when parsing U3D files, allowing remote code execution after a user opens a malicious file or visits a malicious page. The vulnerability can be triggered with crafted U3D data and results in code execution in the ...

CVE-2022-42420

PDF-XChange Editor is affected by CVE-2022-42420 due to a TIF file parsing issue that can trigger a write past the end of an allocated buffer, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). The vulnerability context is the PDF-XChange...

CVE-2022-42419

CVE-2022-42419 affects PDF-XChange Editor. The vulnerability stems from TIF file parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Sev...

CVE-2022-42423

PDF-XChange Editor is affected by a TIF file parsing issue that can cause a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Affected component: PDF-XChange Editor (parsing of TIF images). Root cause: out-of-bounds write during TIF data handling...

CVE-2022-42383

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42393

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-40719

CVE-2022-40719 affects D-Link DIR-2150 firmware 4.0.1. The vulnerability lies in the xupnpd_generic.lua plugin of the xupnpd service, which listens on TCP port 4044 by default. When parsing the feed parameter, the input is not properly validated before being used in a system call, enabling networ...

CVE-2022-42415

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42401

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...