A vulnerability allowing out-of-bounds read has been identified in PDF-XChange Editor versions 10.5.2.395 and prior. This issue arises from improper validation of user-supplied data when parsing PRC files, leading to the potential for reading past the end of an allocated object. As a result, remote attackers could exploit this vulnerability to disclose sensitive information. Furthermore, this out-of-bounds read could be leveraged in conjunction with other vulnerabilities to execute arbitrary code within the context of the current process.
Exploitation of this vulnerability could lead to unauthorized information disclosure. Additionally, according to the Zero Day Initiative, this vulnerability could be combined with others to execute arbitrary code.
PDF-XChange has released a security update to address this vulnerability. Users can download the latest version from the PDF-XChange website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
