Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2024-5303

What is CVE-2024-5303?

The vulnerability within Kofax Power PDF involves a flaw in the parsing of PSD files that can lead to an out-of-bounds write condition. This occurs due to inadequate validation of incoming data from users, specifically when processing malicious files. Attackers can exploit this vulnerability by enticing a user to open a specially crafted PSD file, resulting in potential arbitrary code execution within the context of the application. It is essential for users and organizations to remain vigilant and ensure that they apply necessary patches and updates to mitigate risks associated with this vulnerability.

References