EUVD-2022-45454

Malicious code in bioql PyPI...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42380

CVE-2022-42380 affects PDF-XChange Editor. The root cause is an out-of-bounds write when parsing U3D files, allowing remote code execution after a user opens a malicious file or visits a malicious page. The vulnerability can be triggered with crafted U3D data and results in code execution in the ...