Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-41144

PDF-XChange Editor is affected by CVE-2022-41144 due to a parsing flaw in U3D files that can trigger a write-past-end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented as ...