CVE-2024-9741

Summary

CVE-2024-9741 is a heap-based buffer overflow vulnerability in Tungsten Automation Power PDF's PDF file parsing process. This issue allows remote attackers to execute arbitrary code on affected installations by providing maliciously crafted PDF files or web pages. The flaw stems from insufficient validation of user-supplied data before copying it to a fixed-length buffer. Attackers can exploit this vulnerability, identified as ZDI-CAN-24457, to gain control over the affected system. User interaction is necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.