Information Disclosure Vulnerability in PDF-XChange Editor
CVE-2024-8832

5.5MEDIUM

Key Information:

Vendor

PDF-xchange
Status
PDF-xchange Editor
PDF-tools
Vendor
CVE Published:
22 November 2024

What is CVE-2024-8832?

This vulnerability pertains to an information disclosure issue within the PDF-XChange Editor, specifically related to the improper validation of user-supplied data during EMF file parsing. Attackers can exploit this flaw to access sensitive information stored in affected instances of the application. The vulnerability necessitates user interaction, as the target must either navigate to a malicious webpage or open a compromised EMF file to trigger the issue. By bypassing data validation, an attacker could potentially read beyond the bounds of allocated memory, enabling further exploitation when combined with other vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1255/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.