CVE-2022-42410: 
PDF-XChange Editor vulnerability analysis and mitigation

A remote code execution vulnerability was identified in PDF-XChange Editor, tracked as CVE-2022-42410. The vulnerability was discovered and reported to the vendor on August 23, 2022, and was publicly disclosed on October 7, 2022. The flaw exists within the parsing of PGM files in PDF-XChange Editor (ZDI Advisory).

The vulnerability is characterized by an out-of-bounds write condition that occurs during the parsing of PGM files. When processing crafted data in a PGM file, the application can trigger a write operation past the end of an allocated buffer. The vulnerability has been assigned a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process on affected installations of PDF-XChange Editor. This could potentially lead to complete system compromise at the level of the affected application (CVE Mitre).

PDF-XChange has released an update to address this vulnerability. Users are advised to update to the latest version of PDF-XChange Editor to protect against this security flaw (ZDI Advisory, Tracker Software).