Information Disclosure Vulnerability in PDF-XChange Editor
CVE-2024-8828

5.5MEDIUM

Key Information:

Vendor

PDF-xchange
Status
PDF-xchange Editor
PDF-tools
Vendor
CVE Published:
22 November 2024

What is CVE-2024-8828?

The vulnerability resides in the EMF file parsing mechanism of PDF-XChange Editor, which contains a flaw allowing for potential information disclosure. This arises from insufficient validation of user-input data, enabling an out-of-bounds read where an attacker can access memory locations beyond the allocated object. Successfully exploiting this vulnerability requires user interaction, as the targeted user must visit a malicious webpage or open a harmful file crafted by the attacker. By leveraging this flaw alongside other vulnerabilities, an attacker may execute arbitrary code within the affected process context, leading to further compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1251/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.