Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-42127

What is CVE-2023-42127?

The vulnerability within Kofax Power PDF is related to its handling of PDF file parsing. Specifically, the flaw arises due to insufficient validation of user-supplied input, which can lead to an out-of-bounds write condition. This issue enables remote attackers to execute arbitrary code when a user interacts with a malicious PDF file or visits a harmful webpage. The nature of this vulnerability requires user engagement for exploitation, proving a potential risk for those using affected installations without timely updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References