Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

A use-after-free vulnerability has been identified in Tungsten Automation Power PDF, specifically within the JP2 file parsing component. This vulnerability allows remote attackers to disclose sensitive information on affected systems. Exploitation requires user interaction, as the target must open a malicious JP2 file. The vulnerability arises from improper validation of object existence before performing operations, potentially allowing attackers to execute arbitrary code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure and, when combined with other vulnerabilities, allow for arbitrary code execution in the context of the current process.