PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in PDF-XChange Editor versions 10.5.2.395 and prior. This issue arises from improper validation of user-supplied data when parsing JP2 files, leading to an out-of-bounds write. An attacker can exploit this vulnerability by convincing a user to open a malicious JP2 file, allowing the execution of arbitrary code in the context of the affected application.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users are advised to update to PDF-XChange Editor version 10.6.0.396, which addresses this vulnerability. Instructions for updating can be found on the PDF-XChange website.