WID-SEC-W-2023-1067

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Foxit PDF Editor und Foxit Reader: Mehrere Schwachstellen

view advisory published 2023-04-24

Ein Angreifer kann mehrere Schwachstellen in Foxit PDF Editor und Foxit Reader ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand zu verursachen und seine Privilegien zu erweitern.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-27366US——
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo…
CVE-2023-27365US——
Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins…
CVE-2023-27364US——
Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins…
CVE-2023-27363US—OT elevatedExploit
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan