CVE-2023-24308: Input Validation

Published Mar 28, 2023

Updated

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file.

Affected Software

2 affected components

Tracker-software Pdf-xchange Editor=9.3

PDF-XChange PDF-XChange Editor=9.3

Event History

Mar 28, 2023

CVE Published

09:15 PM

Frequently Asked Questions

What is CVE-2023-24308?

CVE-2023-24308 is a potential memory vulnerability in PDF-XChange Editor version 9.3 by Tracker Software.

How does CVE-2023-24308 impact users?

CVE-2023-24308 allows attackers to execute code when a user opens a crafted PDF file.

What is the severity of CVE-2023-24308?

CVE-2023-24308 has a severity rating of high (7.8).

How can I fix CVE-2023-24308?

To fix CVE-2023-24308, users should update to a version of PDF-XChange Editor that is not affected by the vulnerability.

Where can I find more information about CVE-2023-24308?

More information about CVE-2023-24308 can be found at the following link: [CVE-2023-24308](https://www.sit.fraunhofer.de/cve-2023-24308/).

CVE-2023-24308: Input Validation

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2023-24308?

How does CVE-2023-24308 impact users?

What is the severity of CVE-2023-24308?

How can I fix CVE-2023-24308?

Where can I find more information about CVE-2023-24308?

Company

Resources

Contact