CVE-2024-9745

Summary

CVE-2024-9745 is a stack-based buffer overflow vulnerability affecting Tungsten Automation Power PDF. This issue, which is similar to ZDI-CAN-24461, arises from the inadequate validation of user-supplied data during the processing of TIF files. An attacker can exploit this weakness by supplying overly long data to trigger the buffer overflow, leading to remote code execution on affected systems. User interaction is necessary for exploitation, either through visiting a malicious webpage or opening a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.