Skip to content
OpenAdvisories
High WID-SEC-2023-1839 5 CVEs

Foxit Reader: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 19, 2023 · Updated Jul 19, 2023 · de-DE

Vendor: Foxit Product: PDF Reader Product: Reader < 12.1.3.15356 Product: Reader 12.1.1.15289 Product: Reader 12.1.2.15332 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit Reader ausnutzen, um beliebigen Programmcode auszuführen.

Product

Foxit Reader ist ein PDF Reader.

Vulnerabilities 5

  • High 8.8
    CVE-2023-27379

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-28744

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A …

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-32664

    A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-33866

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-33876

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially cr…

    Foxit Foxit Reader

Revision history

  1. #1

    Initiale Fassung

References