CVE-2022-42388: PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-42388?
CVE-2022-42388 has been classified as a vulnerability that allows remote attackers to disclose sensitive information.
How do I fix CVE-2022-42388?
To fix CVE-2022-42388, ensure that you update your PDF-XChange Editor to the latest version beyond 9.5.366.0.
What impacts does CVE-2022-42388 have on my system?
CVE-2022-42388 can lead to the unwanted exposure of sensitive information if exploited.
Is user interaction required for exploiting CVE-2022-42388?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file.
What versions are affected by CVE-2022-42388?
CVE-2022-42388 affects PDF-XChange Editor versions up to and including 9.5.366.0.