This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543
Published Mar 28, 2023
7.8
HIGHCVSS 3.1
EPSS 1.02%
Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16187.
Affected products
-
Affected
- 11.1.0.52543
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Foxit | PDF Reader | unknown | Affected
|
- < 10.1.7
- ≥ 11.0.0 · < 11.2.1
- < 11.2.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29665 Advisory
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-351/ Third Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29665 | Advisory | |
| https://www.foxit.com/support/security-bulletins.html | Vendor Advisory | |
| https://www.zerodayinitiative.com/advisories/ZDI-22-351/ | Third Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data