CVE-2023-42079: PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability
PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of J2K files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-21851.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42079?
CVE-2023-42079 has not been openly classified with a CVSS score, but it involves an information disclosure risk which could be significant.
How do I fix CVE-2023-42079?
To address CVE-2023-42079, ensure you update PDF-XChange Editor to the latest version provided by Tracker Software.
What type of vulnerability is CVE-2023-42079?
CVE-2023-42079 is classified as an information disclosure vulnerability due to uninitialized variable handling.
Is user interaction required to exploit CVE-2023-42079?
Yes, user interaction is required to exploit CVE-2023-42079, as it involves opening a crafted J2K file.
What kind of information could be disclosed by CVE-2023-42079?
CVE-2023-42079 could potentially lead to the disclosure of sensitive information from affected instances of PDF-XChange Editor.