CVE-2023-27342: 
PDF-XChange Editor vulnerability analysis and mitigation

PDF-XChange Editor contains a remote code execution vulnerability (CVE-2023-27342) that affects the EMF file parsing functionality. The vulnerability was discovered by Rocco Calvi (@TecR0c) with TecSecurity and was reported to the vendor on September 28, 2022, with public disclosure on March 31, 2023 (ZDI Advisory).

The vulnerability stems from improper validation of user-supplied values during EMF file parsing, specifically when dereferencing pointers. This untrusted pointer dereference can lead to arbitrary code execution in the context of the current process. The vulnerability has been assigned a CVSS v3.0 base score of 7.8 (HIGH) with the vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor, potentially leading to complete system compromise with the privileges of the current process (ZDI Advisory).

The vulnerability requires user interaction for successful exploitation. An attacker would need to convince a target to visit a malicious page or open a malicious file. The attack complexity is considered low, requiring no privileges, but does need user interaction (ZDI Advisory).

PDF-XChange has released a security update to address this vulnerability. Users are advised to update their installations to the latest version available through the official website (Software History).