CVE-2024-7352

Summary

CVE-2024-7352 is a remote code execution vulnerability affecting PDF-XChange Editor. The flaw is situated in the software's PDF file parsing functionality, which lacks proper validation of user-supplied data. An attacker can exploit this vulnerability by writing data past the end of an allocated object, resulting in arbitrary code execution. User interaction is necessary for exploitation, as the target must visit a malicious webpage or open a malicious file. This vulnerability, also known as ZDI-CAN-23550, grants attackers the ability to execute code in the context of the affected installation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.