Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2024-5513

Summary

The vulnerability associated with Kofax Power PDF involves a flaw in the parsing of JP2 files that allows a remote attacker to execute arbitrary code on affected installations. This flaw results from insufficient validation of user-supplied data, which may lead to an out-of-bounds write past the allocated buffer end. As a consequence, an attacker can exploit the vulnerability to execute code in the context of the current process, provided that a user visits a malicious webpage or opens a compromised file. Awareness of this issue and appropriate security measures are essential to mitigate risks.

References