Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

CVE-2023-42037

Summary

A vulnerability in Kofax Power PDF arises from improper validation of user-supplied data during the parsing of PDF files. This flaw may lead to a memory corruption condition, enabling remote attackers to run arbitrary code on systems where the software is installed. Exploitation requires user interaction, whereby the targeted individual must either visit a malicious website or open a compromised PDF file. Once the malicious payload is executed, the attacker can operate within the context of the affected process, potentially leading to further system compromise.

References