Skip to content
OpenAdvisories
High WID-SEC-2023-1067 4 CVEs

Foxit PDF Editor und Foxit Reader: Mehrere Schwachstellen

Published Apr 24, 2023 · Updated May 14, 2023 · Revision 2 · de-DE

Vendor: Foxit Product: PDF Editor < 12.1.2 Product: Reader < 12.1.2 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Foxit PDF Editor und Foxit Reader ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand zu verursachen und seine Privilegien zu erweitern.

Product

Foxit PDF Editor ist ein Tool zur Bearbeitung von PDF-Dateien.
Foxit Reader ist ein PDF Reader.

Vulnerabilities 4

  • High 7.8
    CVE-2023-27363 Public exploit EPSS 42%

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulne…

    Foxit PDF Reader
  • High 7.8
    CVE-2023-27364

    Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability

    Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vu…

    Foxit PDF Editor
  • High 7.8
    CVE-2023-27365

    Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability

    Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vu…

    Foxit PDF Editor
  • High 7.8
    CVE-2023-27366

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader

Revision history

  1. #2

    PoC für CVE-2023-27363 aufgenommen

  2. #1

    Initiale Fassung

References