Approved changes feed: RSS · Atom

cpe:2.3:a:pdf-xchange:pdf-xchange_editor:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorPdf Xchange (5284f26d-4ef0-511d-b8f4-0ef036adeb16)
ProductPdf Xchange Editor (8b6dfcf0-a4cf-560d-9281-e393fb194cda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8842 vulnerable 2026-06-08 07:00:25.809486 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24481.
Published: 2024-11-22T21:05:21.546Z
Updated: 2024-11-25T19:16:23.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8840 vulnerable 2026-06-08 07:00:25.808311 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JB2 files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-24420.
Published: 2024-11-22T21:05:13.709Z
Updated: 2024-11-25T19:16:23.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8838 vulnerable 2026-06-08 07:00:25.807128 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24409.
Published: 2024-11-22T21:05:04.864Z
Updated: 2024-11-25T19:06:23.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8837 vulnerable 2026-06-08 07:00:25.806718 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24408.
Published: 2024-11-22T21:05:01.357Z
Updated: 2024-11-25T19:06:23.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8833 vulnerable 2026-06-08 07:00:25.804890 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24318.
Published: 2024-11-22T21:04:38.389Z
Updated: 2024-11-25T19:06:23.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8831 vulnerable 2026-06-08 07:00:25.803745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8830 vulnerable 2026-06-08 07:00:25.803166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8827 vulnerable 2026-06-08 07:00:25.801426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8826 vulnerable 2026-06-08 07:00:25.800859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8825 vulnerable 2026-06-08 07:00:25.800388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8818 vulnerable 2026-06-08 07:00:25.796347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8817 vulnerable 2026-06-08 07:00:25.795822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8815 vulnerable 2026-06-08 07:00:25.794506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8814 vulnerable 2026-06-08 07:00:25.793925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8813 vulnerable 2026-06-08 07:00:25.793469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8812 vulnerable 2026-06-08 07:00:25.790005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7352 vulnerable 2026-06-08 06:58:21.999626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27323 vulnerable 2026-06-08 06:31:28.535959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42084 vulnerable 2026-06-08 06:11:07.767381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42077 vulnerable 2026-06-08 06:11:07.763666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42066 vulnerable 2026-06-08 06:11:07.757686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42061 vulnerable 2026-06-08 06:11:07.754943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42059 vulnerable 2026-06-08 06:11:07.745600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42051 vulnerable 2026-06-08 06:11:07.740829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42049 vulnerable 2026-06-08 06:11:07.735942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42046 vulnerable 2026-06-08 06:11:07.733614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40472 vulnerable 2026-06-08 06:11:03.300130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39506 vulnerable 2026-06-08 06:09:37.614298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39498 vulnerable 2026-06-08 06:09:37.609587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39497 vulnerable 2026-06-08 06:09:37.608897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39494 vulnerable 2026-06-08 06:09:37.606717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39493 vulnerable 2026-06-08 06:09:37.606037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39492 vulnerable 2026-06-08 06:09:37.605520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.