ZDI-24-1037: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7352.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must get the target to open a malicious PDF file or visit a malicious page. No prior privileges are required, but successful exploitation depends on user interaction.
What level of access could successful exploitation provide?
An attacker can execute arbitrary code in the context of the current PDF-XChange Editor process. The reported impact includes confidentiality, integrity, and availability effects.
Which installations are exposed?
Affected installations of PDF-XChange Editor are exposed when they parse attacker-controlled PDF content. The provided information does not identify specific affected or fixed version ranges.