CVE-2024-30373

CVE-2024-30373 concerns a vulnerability in Kofax Power PDF where the JPF file parsing fails to validate user-supplied data, causing an out-of-bounds write that can lead to remote code execution. The issue arises from writing past the end of an allocated object during JPF parsing, allowing code ex...

Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPF...