CVE-2023-42096

CVE-2023-42096 affects Foxit PDF Reader. The issue is a Use-After-Free in PDF file parsing due to missing validation of an object before operations, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file...

CVE-2023-42094

CVE-2023-42094 is a Foxit PDF product use-after-free vulnerability in the handling of Annotation objects that can lead to code execution. The flaw stems from not validating an object’s existence before operating on it, enabling an attacker to execute code in the affected process. Exploitation req...

CVE-2023-42093

CVE-2023-42093 pertains to Foxit PDF Reader. The flaw is in how Annotation objects are handled, specifically a failure to validate object existence before operations, enabling a use-after-free that could disclose sensitive information and, in conjunction with other vulnerabilities, may allow arbi...

CVE-2023-42092

CVE-2023-42092 affects Foxit PDF Reader (and Foxit PhantomPDF lineage). It is a Use-After-Free in Doc object handling that allows remote code execution by manipulating undocumented object existence checks, enabling code execution in the process context. User interaction is required (visiting a ma...

CVE-2023-42091

CVE-2023-42091 is a Foxit PDF Reader/XFA vulnerability where the program mishandles Doc objects, failing to validate an object exists before operations, causing a use-after-free that can lead to remote code execution. The issue affects Foxit PDF Reader (and variants like Foxit PhantomPDF) and req...

CVE-2023-42087

CVE-2023-42087 concerns PDF-XChange Editor and its EMF file parsing. The vulnerability is an out-of-bounds read in EMF parsing that can disclose sensitive information from affected installations. It requires user interaction (the target must visit a malicious page or open a malicious file). Root ...

CVE-2023-42085

CVE-2023-42085 affects PDF-XChange Editor; EMF file parsing heap-based buffer overflow allows code execution with user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of user-supplied data length before copying to a fixed-length heap buffer. Ex...

CVE-2023-42083

CVE-2023-42083 affects PDF-XChange Editor. The issue is a heap-based buffer overflow in the JPG parsing path caused by insufficient validation of user-supplied data length before copying to a fixed-length heap buffer, enabling remote code execution. Exploitation requires user interaction (visitin...

CVE-2023-42084

CVE-2023-42084 is a documented EMF parsing out-of-bounds read vulnerability in PDF-XChange Editor. It causes information disclosure by failing to validate EMF data, potentially reading past allocated memory. Exploitation requires user interaction (visiting a malicious page or opening a malicious ...

CVE-2023-42082

CVE-2023-42082 affects PDF-XChange Editor and relates to a Use-After-Free in JPG file parsing. The flaw occurs when the code does not validate the existence of an object before performing operations, enabling an attacker to execute code in the context of the targeted process after user interactio...

CVE-2023-42079

PDF-XChange Editor contains an uninitialized memory vulnerability in the J2K file parser. The flaw, caused by lack of proper initialization before memory access, can allow disclosure of sensitive information and, in conjunction with other vulnerabilities, may enable arbitrary code execution in th...

CVE-2023-42076

PDF-XChange Editor is affected by a heap-based buffer overflow in PDF parsing that can lead to remote code execution. The issue arises from inadequate validation of user-supplied data length before copying to a fixed-size heap buffer, allowing an attacker to run code in the target process. Exploi...

CVE-2023-42073

PDF-XChange Editor is affected by a Doc Object Out-Of-Bounds Read Information Disclosure vulnerability. The flaw occurs in how Doc objects are handled; via JavaScript actions, an attacker can read past the end of an allocated object, potentially disclosing sensitive information. Some sources note...

CVE-2023-42071

CVE-2023-42071 details : A vulnerability in PDF-XChange Editor affects the PDF parsing code, where lack of validation allows a write past the end of an allocated object during PDF file parsing, leading to remote code execution. The issue is exploitable via malicious PDF files or pages and require...

CVE-2023-42063

PDF-XChange Editor is affected by a U3D file parsing OOB read that enables remote code execution. The flaw stems from insufficient validation while parsing U3D data, allowing an attacker to read past an allocated object and execute code in the target process. Exploitation requires user interactio...

CVE-2023-42062

CVE-2023-42062 affects PDF-XChange Editor: U3D file parsing bug where memory is not properly initialized, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: uninitialized memory access during U3D parsing; ide...

CVE-2023-42058

The CVE-2023-42058 entry concerns PDF-XChange Editor. Affected component: U3D file parsing. Root cause: insufficient validation leads to an out-of-bounds read in U3D parsing, enabling remote code execution. Attack requires user interaction (visiting a malicious page or opening a malicious file). ...

CVE-2023-42051

PDF-XChange Editor is affected by an out-of-bounds write in the U3D file parsing path that can lead to remote code execution. The flaw stems from inadequate validation of user-supplied data, allowing a write past the end of an allocated object and enabling code execution in the context of the aff...

CVE-2023-42050

PDF-XChange Editor EMF File Parsing Use-After-Free Information Disclosure Vulnerability affects PDF-XChange Editor. The flaw is in EMF file parsing where existence checks on objects are not performed before operations, enabling information disclosure and potentially arbitrary code execution when ...

CVE-2023-42048

CVE-2023-42048 (PDF-XChange Editor) affects the J2K file parsing component. The root cause is an uninitialized memory access during J2K parsing, leading to information disclosure on vulnerable installations. The vulnerability requires user interaction (visiting a malicious page or opening a malic...