PDF-XChange Editor Out-Of-Bounds Read Vulnerability in PRC File Parsing Allows Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in PDF-XChange Editor versions 10.5.2.395 and prior. This issue arises from improper validation of user-supplied data when parsing PRC files, leading to the potential for reading past the end of an allocated object. As a result, remote attackers could exploit this vulnerability to disclose sensitive information. Additionally, this flaw could be leveraged, in conjunction with other vulnerabilities, to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure and, potentially, arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to PDF-XChange Editor version 10.6.0.396, which addresses this vulnerability. Instructions for updating can be found on the PDF-XChange website.