This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-27334.
http://www.zerodayinitiative.com/advisories/ZDI-24-232/
Related posts:
ZDI-24-230: Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-24-231: Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Cisco Secure Client Carriage Return Line Feed Injection Vulnerability
NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability