WID-SEC-W-2023-1839

DeutschShown in its original language — a full translation is planned for a future version.

Foxit Reader: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2023-07-19

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit Reader ausnutzen, um beliebigen Programmcode auszuführen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-33876US	high8.8	0.96% (61st)	—	2023-07-19
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can tri…
CVE-2023-33866US	high8.8	0.92% (60th)	—	2023-07-19
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specia…
CVE-2023-32664US	high7.8	1.00% (62nd)	—	2023-07-19
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code inside a malicious PDF do…
CVE-2023-28744US	high8.8	0.92% (60th)	—	2023-07-19
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previ…
CVE-2023-27379US	high8.8	1.05% (64th)	—	2023-07-19
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specia…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.