CVE-2022-42370

PDF-XChange Editor is affected by CVE-2022-42370 due to a flaw in U3D file parsing that can trigger a write past the end of an allocated buffer, enabling arbitrary code execution when a user opens a malicious file/page. Exploitation requires user interaction. Affected products/versions are not ex...

CVE-2022-42370

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...