PDF-XChange Editor 10.5.1.394

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pdf-xchange:pdf-xchange_editor:10.5.1.394:*:*:*:*:*:*:*

part: a version: 10.5.1.394 update: *

VendorPdf Xchange (5284f26d-4ef0-511d-b8f4-0ef036adeb16)
ProductPdf Xchange Editor (8b6dfcf0-a4cf-560d-9281-e393fb194cda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2231 vulnerable 2026-06-08 07:16:56.526210 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25473.
Published: 2025-03-24T19:45:42.198Z
Updated: 2025-03-24T20:05:31.236Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.