CVE-2024-8847

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor (affected versions not specified)

Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this issue, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects, resulting from the lack of proper validation of user-supplied data. This can lead to a read past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue.