CVE-2023-39494 PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-39494

CVE-2023-39494 affects PDF-XChange Editor: a heap-based buffer overflow in the OXPS file parsing, caused by insufficient validation of the length of user-supplied data prior to copying into a fixed‑size heap buffer. This can lead to arbitrary code execution in the current process when a user open...