CVE-2023-37347 Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-37347

CVE-2023-37347 affects Kofax Power PDF, specifically the U3D file parsing path. The root cause is improper validation of user-supplied data in U3D parsing, causing an out-of-bounds read that can be leveraged to execute code in the process context. Exploitation requires user interaction (the targe...