CVE-2024-9733

Summary

CVE-2024-9733 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. This issue stems from an out-of-bounds write in the PDF file parsing process, which arises due to insufficient validation of user-supplied data. An attacker can exploit this flaw by crafting a malicious PDF file or luring the target to a malicious webpage. Once exploited, the attacker gains the ability to execute arbitrary code in the affected installation's context. This vulnerability, originally discovered as ZDI-CAN-24389, underscores the importance of proper data validation in PDF file parsing to prevent code injection attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.