Tungsten Automation Power PDF Out-of-Bounds Write Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Tungsten Automation Power PDF, specifically in the parsing of JPF files. This issue arises from inadequate validation of user-supplied data, leading to an out-of-bounds write that can be exploited to execute arbitrary code within the context of the current process. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.