CVE-2024-9734

Summary

CVE-2024-9734 is a heap-based buffer overflow vulnerability in Tungsten Automation Power PDF's PDF file parsing feature. This issue allows remote code execution, making affected installations of Tungsten Automation Power PDF susceptible to attack. The flaw stems from insufficient validation of user-supplied data length prior to copying it to a fixed-length buffer. To exploit this vulnerability, an attacker needs the target to visit a malicious webpage or open a maliciously crafted PDF file. This vulnerability, identified as ZDI-CAN-24400, can potentially give attackers control over the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.