PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in PDF-XChange Editor, specifically within the handling of AcroForms. This flaw allows remote attackers to execute arbitrary code on affected installations. The vulnerability arises from the absence of proper validation of an object's existence before performing operations on it. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the current process.

Remediation

Users can upgrade to PDF-XChange Editor version 10.4.1.389 to address this vulnerability.