Description
In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed.
Advisories 2
- WID-SEC-2024-2220 Foxit PDF Editor und Reader: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 22, 2024
- NCSC-2024-0385 Kwetsbaarheden verholpen in Foxit PDF Editor en PDF Reader NCSC-NL (Netherlands) · Sep 30, 2024