CVE-2023-39488

CVE-2023-39488 : PDFs-XChange Editor is affected by a Use-After-Free condition in TIF file parsing that can lead to remote code execution. The flaw arises from not validating the existence of an object before operating on it, allowing an attacker to execute code with the current process context. ...

CVE-2023-39489 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39487 PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-39487 PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-39487

PDF-XChange Editor contains a vulnerability in the handling of util objects that can trigger a read past the end of an allocated object via JavaScript actions. This out-of-bounds read leads to information disclosure and, when combined with other issues, may enable arbitrary code execution in the ...

CVE-2023-39486 PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-39486 PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-39486

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. Affected software: PDF-XChange Editor (Windows). Root cause: improper validation in JP2 file parsing leading to memory corruption. Impact: remote code execution in the compromised process; requires user int...

CVE-2023-39485 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39484 PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the...

CVE-2023-39484

CVE-2023-39484 affects PDF-XChange Editor. The vulnerability lies in PDF file parsing where memory is accessed without proper initialization, leading to information disclosure. Impact: potential exposure of sensitive data on affected installations. Exploitation requires user interaction (the targ...

CVE-2023-39484 PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the...

CVE-2023-39485 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-39485

PDF-XChange Editor is affected by CVE-2023-39485 due to a flaw in JP2 file parsing that can trigger an out-of-bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the target must open a crafted JP2 or visit a malicious page). ...

CVE-2023-39483 PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange PDF-XChange Editor. User interaction is required to exploit this vulnerability in that...

CVE-2023-39483 PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange PDF-XChange Editor. User interaction is required to exploit this vulnerability in that...

CVE-2023-39483

CVE-2023-39483 affects PDF-XChange Editor. The flaw lies in the J2K file parsing that can trigger a read past the end of an allocated buffer, causing information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The description notes that ...

CVE-2023-38118

CVE-2023-38118 affects Foxit PDF Reader (AcroForm Doc object) with an out-of-bounds write that enables remote code execution. The flaw arises from insufficient validation when handling Doc objects, allowing write past the end of an allocated object. Exploitation requires user interaction (visitin...

CVE-2023-38118 Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2023-38119

Foxit PDF Reader is affected by an AcroForm signature handling vulnerability (CVE-2023-38119): an out-of-bounds read caused by insufficient validation of user-supplied data in signature fields can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or ...