CVE-2024-9742

Summary

CVE-2024-9742 is a heap-based buffer overflow vulnerability in Tungsten Automation Power PDF. This issue allows remote code execution, requiring user interaction to exploit it through malicious PSD files. The flaw stems from insufficient validation of user-supplied data length prior to copying it into a fixed-length buffer. Consequently, an attacker can exploit this vulnerability to execute arbitrary code in the context of the affected Power PDF installation. (ZDI-CAN-24458)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.