CVE-2022-42384

CVE-2022-42384 affects PDF-XChange Editor. The root cause is in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process after user interaction (visiting a malicious pag...

CVE-2022-42376

CVE-2022-42376 affects Tracker Software’s PDF-XChange Editor . The flaw resides in the parsing of U3D files , where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure. User interaction is required (open a malicious file/page). Exploitation could l...

CVE-2022-42423

PDF-XChange Editor is affected by a TIF file parsing issue that can cause a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Affected component: PDF-XChange Editor (parsing of TIF images). Root cause: out-of-bounds write during TIF data handling...

CVE-2022-42418

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42402

PDF-XChange Editor is affected by CVE-2022-42402 due to a parsing flaw in PDF handling, where crafted data in an embedded U3D object can cause a read past the end of an allocated buffer. This can allow remote code execution with the attacker needing user interaction (visiting a malicious page or ...

CVE-2022-42387

PDF-XChange Editor is affected by CVE-2022-42387 due to a buffer read overflow in the parsing of U3D files. The flaw allows a remote attacker who persuades a user to open a malicious file or visit a crafted page to disclose sensitive information; user interaction is required and the attacker coul...

CVE-2022-42377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42417

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42399

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41147

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42397

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42400

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42406

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42412

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42411

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41142

The CVE-2022-41142 vulnerability affects Centreon and is a SQL injection flaw in how poller resource configuration requests are processed. The root cause is insufficient validation of a user-supplied string used to construct SQL queries, enabling an attacker who can authenticate to escalate privi...

CVE-2022-42369

CVE-2022-42369 affects PDF-XChange Editor. The root cause is a parsing flaw in U3D file handling that can trigger a read past the end of an allocated buffer, enabling information disclosure and potentially arbitrary code execution when combined with other vulnerabilities. Exploitation requires us...

CVE-2022-42386

CVE-2022-42386 affects PDF-XChange Editor. The issue resides in the U3D file parsing code and can trigger a read past the end of an allocated buffer, allowing an information disclosure and potentially enabling arbitrary code execution when combined with other vulnerabilities. Exploitation require...

CVE-2022-42391

CVE-2022-42391 affects Tracker Software PDF-XChange Editor. The vulnerability is in the parsing of U3D files where crafted data triggers a read past the end of an allocated buffer, allowing an attacker to disclose sensitive information and potentially execute arbitrary code in the context of the ...