Approved changes feed: RSS · Atom

cpe:2.3:a:pdf-xchange:pdf-xchange_editor:9.3.361.0:*:*:*:*:*:*:*

part: a version: 9.3.361.0 update: *

VendorPdf Xchange (5284f26d-4ef0-511d-b8f4-0ef036adeb16)
ProductPdf Xchange Editor (8b6dfcf0-a4cf-560d-9281-e393fb194cda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32161 vulnerable 2026-06-08 06:04:45.080453 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17778.
Published: 2024-05-03T01:56:42.663Z
Updated: 2024-08-02T15:10:23.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32160 vulnerable 2026-06-08 06:04:45.078436 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17767.
Published: 2024-05-03T01:56:41.886Z
Updated: 2024-08-02T15:10:23.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32159 vulnerable 2026-06-08 06:04:45.078068 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17765.
Published: 2024-05-03T01:56:41.112Z
Updated: 2024-08-02T15:10:23.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32158 vulnerable 2026-06-08 06:04:45.077544 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17764.
Published: 2024-05-03T01:56:40.329Z
Updated: 2024-08-02T15:10:23.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37375 vulnerable 2026-06-08 05:47:12.711961 Details available
LOW (3.3)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPC files. Crafted data in a JPC file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18069.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T19:11:42.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37374 vulnerable 2026-06-08 05:47:12.711570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37373 vulnerable 2026-06-08 05:47:12.711240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37372 vulnerable 2026-06-08 05:47:12.710721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37371 vulnerable 2026-06-08 05:47:12.710406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37370 vulnerable 2026-06-08 05:47:12.709962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37369 vulnerable 2026-06-08 05:47:12.709561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37368 vulnerable 2026-06-08 05:47:12.709143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37367 vulnerable 2026-06-08 05:47:12.708833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37366 vulnerable 2026-06-08 05:47:12.708523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37365 vulnerable 2026-06-08 05:47:12.708024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37364 vulnerable 2026-06-08 05:47:12.707547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37363 vulnerable 2026-06-08 05:47:12.707019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37362 vulnerable 2026-06-08 05:47:12.706606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37361 vulnerable 2026-06-08 05:47:12.706181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37360 vulnerable 2026-06-08 05:47:12.705824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37359 vulnerable 2026-06-08 05:47:12.705259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37358 vulnerable 2026-06-08 05:47:12.704943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37357 vulnerable 2026-06-08 05:47:12.704512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37356 vulnerable 2026-06-08 05:47:12.704181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37355 vulnerable 2026-06-08 05:47:12.703760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37354 vulnerable 2026-06-08 05:47:12.703326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37353 vulnerable 2026-06-08 05:47:12.702799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37352 vulnerable 2026-06-08 05:47:12.702464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37351 vulnerable 2026-06-08 05:47:12.701867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37350 vulnerable 2026-06-08 05:47:12.701371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37349 vulnerable 2026-06-08 05:47:12.700785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.