CVE-2024-9732

Summary

CVE-2024-9732 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. This issue arises due to insufficient validation of objects during XPS file parsing. An attacker can exploit this vulnerability by creating a malicious XPS file or crafting a malicious webpage. Once the target interacts with the malicious content, the attacker can execute arbitrary code in the context of the affected system. This vulnerability, also known as ZDI-CAN-24385, poses a significant risk to installations of Tungsten Automation Power PDF.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.