CVE-2023-39501 PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the targ...

CVE-2023-39501

PDF-XChange Editor is affected by an OXPS file parsing vulnerability caused by dereferencing an unvalidated user-supplied value, enabling remote code execution when a user opens a malicious OXPS file or visits a malicious page. The flaw, described by ZDI as ZDI-23-1135, requires user interaction ...