CVE-2024-9739

Summary

CVE-2024-9739 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. This issue arises from insufficient validation of user-supplied data during PDF file parsing, leading to memory corruption. Exploitation requires the target to visit a malicious webpage or open a specially crafted PDF file. Successful attacks allow an attacker to execute arbitrary code in the context of the current process. (ZDI-CAN-24455)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.