Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42396

CVE-2022-42396 affects PDF-XChange Editor. The flaw, in the XPS file parsing path, stems from inadequate validation of a user-supplied value before dereferencing a pointer, enabling arbitrary code execution when a user opens a malicious file or visits a malicious page. The vulnerability requires ...