CVE-2024-8817

Summary

CVE-2024-8817 is a remote code execution vulnerability affecting PDF-XChange Editor. This issue arises from an out-of-bounds write flaw in the software's U3D file parsing feature. Attackers can exploit this vulnerability by crafting malicious U3D files or web pages, requiring user interaction for successful exploitation. The lack of proper data validation in the parsing process enables an attacker to write data beyond the allocated object, resulting in arbitrary code execution within the affected system. This vulnerability was identified as ZDI-CAN-24212 prior to its public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.