Skip to content
OpenAdvisories
High WID-SEC-2023-2304 11 CVEs

Foxit PDF Editor und Foxit PDF Reader: Mehrere Schwachstellen

Published Sep 11, 2023 · Updated Sep 12, 2023 · Revision 2 · de-DE

Vendor: Foxit Product: PDF Editor < 2023.2 Product: Reader < 2023.2 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit PDF Editor und Foxit Reader ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Foxit PDF Editor ist ein Tool zur Bearbeitung von PDF-Dateien.
Foxit Reader ist ein PDF Reader.

Vulnerabilities 11

  • High 8.8
    CVE-2023-39542

    A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted ma…

    Foxit Foxit Reader
  • High 7.8
    CVE-2023-42091

    Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability …

    Foxit PDF Reader
  • High 7.8
    CVE-2023-42092

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • High 7.8
    CVE-2023-42094

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • High 7.8
    CVE-2023-42096

    Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabilit…

    Foxit PDF Reader
  • High 7.8
    CVE-2023-42097

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • Low 3.3
    CVE-2023-42089

    Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability

    Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil…

    Foxit PDF Reader
  • Low 3.3
    CVE-2023-42090

    Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this v…

    Foxit PDF Reader
  • Low 3.3
    CVE-2023-42093

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi…

    Foxit PDF Reader
  • Low 3.3
    CVE-2023-42095

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

    Foxit PDF Reader
  • Low 3.3
    CVE-2023-42098

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi…

    Foxit PDF Reader

Revision history

  1. #2

    CVE Nummern ergänzt

  2. #1

    Initiale Fassung

References