PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-42055

Summary

A vulnerability exists in PDF-XChange Editor due to inadequate validation of U3D file inputs. This flaw allows remote attackers to execute arbitrary code on the system when a user visits a malicious webpage or opens a crafted file. By exploiting this vulnerability, an attacker can leverage the flaw to read beyond the allocated memory buffer, which poses a significant risk to affected installations.

References