PT-2023-7349 · Foxit · Foxit Reader

Kamlapati Choubey · Publicado 2023-11-27 · Atualizado 2023-12-01 · CVE-2023-39542

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader version 12.1.3.15356

Description A code execution issue exists in the Javascript saveAs API of Foxit Reader. This is due to the improper handling of specially crafted malformed files, which can lead to the creation of arbitrary files and potentially result in remote code execution. An attacker must trick the user into opening a malicious file to exploit this issue. Additionally, exploitation is possible if a user visits a specially crafted malicious site when the browser plugin extension is enabled.

Recommendations For Foxit Reader version 12.1.3.15356, consider disabling the Javascript saveAs API until a patch is available to prevent potential code execution. Restrict access to malicious sites and avoid opening untrusted files to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-73

CWE-610

Identificadores relacionados

BDU:2023-08380

CVE-2023-39542

Produtos afetados

Foxit Reader

Referências · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832 · Exploit
• https://osv.dev/vulnerability/CVE-2023-39542 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39542 · Nota de Segurança
• https://t.me/cvenotify/61939 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-08380 · Nota de Segurança