PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in PDF-XChange Editor, specifically in versions through 10.5.2.395. This vulnerability allows remote attackers to execute arbitrary code on affected installations. The issue arises from the application's handling of App objects, where the existence of an object is not properly validated before operations are performed. Exploitation of this vulnerability requires user interaction, as the target must open a malicious file or visit a malicious webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the current process.

Remediation

Users can update to PDF-XChange Editor version 10.6.0.396 or later to address this vulnerability.