Information Disclosure Vulnerability in PDF-XChange Editor

CVE-2024-8820

Summary

An information disclosure vulnerability exists within the PDF-XChange Editor related to the parsing of U3D files. This flaw stems from inadequate validation of user-supplied data, leading to the potential for reading beyond the end of an allocated buffer. Remote attackers may exploit this vulnerability by enticing a user to visit a malicious webpage or open a crafted file, enabling the leakage of sensitive data from affected installations. Furthermore, this vulnerability can be exploited in conjunction with other weaknesses to execute arbitrary code within the context of the current process.

References