PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability allowing information disclosure has been identified in PDF-XChange Editor. This issue arises from improper validation of user-supplied data when parsing JB2 files, leading to a read past the end of an allocated object. Remote attackers can exploit this vulnerability to disclose sensitive information on affected installations, but user interaction is required, as the target must open a malicious JB2 file. Additionally, this vulnerability could be leveraged, in conjunction with others, to execute arbitrary code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure and potentially allow for arbitrary code execution, depending on the presence of other vulnerabilities that could be chained with this one.

Remediation

Users are advised to update to PDF-XChange Editor version 10.4.2.390.