Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Tungsten Automation Power PDF, specifically in the parsing of JP2 files. This issue arises from inadequate validation of user-supplied data, leading to out-of-bounds read conditions that can be exploited to execute arbitrary code within the context of the current process. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system, with the executed code running in the context of the current process.