EUVD-2022-45447

Malicious code in bioql PyPI...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42373

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42373

CVE-2022-42373 affects PDF-XChange Editor. The root cause is an out-of-bounds write during parsing of U3D files, allowing remote attackers to execute arbitrary code after the user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction and runs with the current...