A vulnerability allowing out-of-bounds read has been identified in PDF-XChange Editor versions 10.5.2.395 and prior. This issue arises from improper validation of user-supplied data when parsing PRC files, leading to reading past the end of an allocated buffer. As a result, remote attackers could exploit this vulnerability to disclose sensitive information. Additionally, this flaw could be leveraged in conjunction with other vulnerabilities to execute arbitrary code within the context of the current process.
Exploitation of this vulnerability could result in unauthorized information disclosure and potentially allow for arbitrary code execution in the context of the affected process.
Users are advised to update to PDF-XChange Editor version 10.6.0.396, which addresses this vulnerability. This update can be downloaded from the PDF-XChange website or through the PDF-XChange Updater.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
