Skip to content
OpenAdvisories
High WID-SEC-2024-3711 5 CVEs

Foxit PDF Editor und Foxit Reader: Mehrere Schwachstellen

Published Dec 16, 2024 · Updated Dec 30, 2024 · Revision 2 · de-DE

Vendor: Foxit Product: PDF Editor Product: PDF Reader Platform: Windows

Summary

Ein authentifizierter Angreifer kann mehrere Schwachstellen in Foxit PDF Editor und Foxit Reader ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben oder Daten zu manipulieren.

Product

Foxit PDF Editor ist ein Tool zur Bearbeitung von PDF-Dateien.
Foxit Reader ist ein PDF Reader.

Vulnerabilities 5

  • High 8.8
    CVE-2024-47810

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially craf…

    Foxit Foxit Reader
  • High 8.8
    CVE-2024-49576

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A sp…

    Foxit Foxit Reader
  • High 7.8
    CVE-2024-12751

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-12752

    Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in …

    Foxit PDF Reader
  • Medium 6.7
    CVE-2024-12753

    Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability

    Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code …

    Foxit PDF Reader

Revision history

  1. #2

    CVE-Nummern ergänzt

  2. #1

    Initiale Fassung

References