CVE-2024-9748

Summary

CVE-2024-9748 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. This issue arises due to insufficient validation during the parsing of XPS files, allowing attackers to execute arbitrary code when the target interacts with a malicious page or file. The specific flaw occurs when the software fails to confirm the existence of an object before performing operations on it. This vulnerability, identified as ZDI-CAN-24464, poses a significant risk to affected installations of Tungsten Automation Power PDF.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.