CVE-2024-9249

Summary

CVE-2024-9249 is a remote code execution vulnerability affecting Foxit PDF Reader. The flaw arises from improper PDF file parsing, resulting in an out-of-bounds read. Attackers can exploit this vulnerability by crafting a malicious PDF file or luring users to a malicious webpage. Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the current process. This vulnerability, originally identified as ZDI-CAN-24301, underscores the importance of validating user-supplied data to prevent buffer overflows.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.