PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-42044

Summary

A vulnerability exists in PDF-XChange Editor that allows attackers to execute arbitrary code through the exploitation of insufficient validation during PDF file parsing. This flaw enables an attacker to cause an out-of-bounds read, which may lead to remote code execution. Successful exploitation requires user interaction, such as opening a malicious PDF file or visiting an infected webpage. Users of affected versions should apply necessary updates and remain vigilant against unsolicited files to mitigate potential risks.

References