The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.388. It is, therefore, affected by multiple vulnerabilities:

  - A specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of     user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this     vulnerability to execute code in the context of the current process. (CVE-2024-8847)

  - A specific flaw exists within the parsing of RTF files. The issue results from the lack of proper initialization of     memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the     current process. (CVE-2024-8842)

  - A specific flaw exists within the parsing of JB2 files. The issue results from the lack of proper validation of     user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this     in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
    (CVE-2024-8843)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities

high Nessus Plugin ID 207519

Version 1.6