PDF-XChange Editor Out-of-Bounds Read Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in PDF-XChange Editor. This issue arises from an out-of-bounds read related to the handling of Doc objects, caused by inadequate validation of user-supplied data. As a result, it is possible to read past the end of an allocated buffer, allowing attackers to execute arbitrary code in the context of the current process. Exploitation requires user interaction, such as visiting a malicious page or opening a harmful file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can upgrade to PDF-XChange Editor version 10.4.1.389 to address this vulnerability.