PDF-XChange Editor Out-of-Bounds Write Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in PDF-XChange Editor versions 10.5.2.395 and prior. This issue arises from improper validation of user-supplied data when parsing PRC files, leading to an out-of-bounds write. An attacker can exploit this vulnerability by convincing a user to open a malicious PRC file, allowing the execution of arbitrary code in the context of the current process.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users are advised to update to PDF-XChange Editor version 10.6.0.396, which addresses this vulnerability.