High WID-SEC-2022-2353 17 CVEs

Foxit Reader: Mehrere Schwachstellen

Published May 8, 2022 · Updated Dec 18, 2022 · Revision 4 · de-DE

Vendor: Foxit Product: PDF Editor < 11.2.2 Product: Reader < 11.2.2 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit Reader und Foxit PDF Editor ausnutzen, um beliebigen Programmcode auszuführen, um falsche Informationen darzustellen und um einen Denial of Service Zustand herbeizuführen.

Product

Foxit Reader ist ein PDF Reader.
Foxit PDF Editor ist ein Tool zur Bearbeitung von PDF-Dateien.

Vulnerabilities 17

High 7.8

CVE-2022-28669

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28671

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28672 Public exploit

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28673

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28674

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28675

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28676

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28677

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28678

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28679

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28680

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28682

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
High 7.8

CVE-2022-28683

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

Foxit PDF Reader

Jul 18, 2022
Low 3.3

CVE-2022-28670

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

Foxit PDF Reader

Jul 18, 2022
Low 2.5

CVE-2022-28681

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

Foxit PDF Reader

Jul 18, 2022
Unscored —

CVE-2022-25641

Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference in…

Aug 29, 2022
Unscored —

CVE-2022-30557

Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mis…

May 11, 2022

Revision history

2022-12-18 #4
PoC aufgenommen
2022-05-16 #3
CVE Nummern ergänzt
2022-05-11 #2
CVE ergänzt
2022-05-08 #1
Initiale Fassung

References

PoC auf hacksys.io vom 2022-12-18
https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672
Foxit Security Bulletins vom 2022-05-09
https://www.foxit.com/support/security-bulletins.html