PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

🗓️ 08 Sep 2023 00:00:00Reported by Mat Powell of Trend Micro Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 11 Views

PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. Allows remote attackers to disclose sensitive information. User interaction required, exploit via visiting a malicious page or opening a malicious file. Vulnerability lies in parsing of JPC files, lack of proper validation of user-supplied data results in a read past the end of an allocated object. Can be leveraged with other vulnerabilities to execute arbitrary code

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2023-42072	3 May 202403:15	–	attackerkb
CNNVD	PDF-XChange Editor 安全漏洞	3 May 202400:00	–	cnnvd
CNVD	PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33499)	19 Jul 202400:00	–	cnvd
CVE	CVE-2023-42072	3 May 202402:12	–	cve
Cvelist	CVE-2023-42072 PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	3 May 202402:12	–	cvelist
EUVD	EUVD-2023-46531	3 Oct 202520:07	–	euvd
NVD	CVE-2023-42072	3 May 202403:15	–	nvd
Positive Technologies	PT-2023-28248 · Unknown · Pdf-Xchange Editor	8 Sep 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-42072 PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	3 May 202402:12	–	vulnrichment