Hosting • Web • Marketing

PDF.js < 4.2.67 – 6.4 vulnerability

The CourseVector team excels in managed hosting, constantly diving in to resolve issues for our clients. For instance, we recently tackled a vulnerability in PDF.js (versions prior to 4.2.67) that allowed authenticated users with contributor-level permissions to execute arbitrary JavaScript via crafted PDF files. This flaw, known as CVE-2024-4367, stemmed from a missing type check when handling fonts, posing significant security risks. By swiftly addressing such vulnerabilities, we ensure our clients’ websites remain secure and functional. We always keep our clients informed about our proactive measures, showcasing our dedication to their online safety and performance.

Happy Holidays!

With the holiday season upon us our staff will be taking some time to relax and enjoy time with their families.

We may be a bit slower to respond during this period. If you haven’t gotten a response within 24 hours during our normal business hours, please use our support request form and indicate it is an emergency and someone will get back to you quickly.

 

Search

Sign Up for Our Newsletter

Thank you for your interest in our newsletter! Fill in the form below to receive periodic updates on internet and website security, free cybersecurity posters, WordPress news, and more!

"*" indicates required fields

Name*

Your privacy is important to us. We do not share your information with anyone. You can opt out of our newsletter at any time.

Stay up to date with technology, scams, WordPress, and more. Follow CourseVector on Facebook today!