Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42372

PDF-XChange Editor is affected by a U3D file parsing buffer over-read vulnerability that allows remote code execution with user interaction (visiting a malicious page or opening a malicious file). Root cause: crafted U3D data can trigger read past end of allocated memory, enabling code execution ...