CVE-2024-8813

Summary

CVE-2024-8813 is a remote code execution vulnerability affecting PDF-XChange Editor. Malicious U3D files can cause an out-of-bounds write, allowing attackers to execute arbitrary code on affected systems. This issue arises due to inadequate validation of user-supplied data during the U3D file parsing process. User interaction is necessary for exploitation, as the target must visit a malicious webpage or open a malicious file. The flaw, identified as ZDI-CAN-24208, can give attackers control over the affected process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.