PT-2020-6834 · Foxit · Foxit Pdf Editor+1

Published 2020-02-14 · Updated 2025-04-04 · CVE-2022-47881

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader and PDF Editor versions 11.2.1.53537 and earlier

Description The issue is related to an out-of-bounds read operation in memory, which can be exploited by opening a specially crafted malicious file or page, allowing a remote attacker to gain unauthorized access to protected information. This can lead to the disclosure of sensitive information and affect the system.

Recommendations For Foxit PDF Reader and PDF Editor versions 11.2.1.53537 and earlier, update to a version later than 11.2.1.53537 to resolve the issue. As a temporary workaround, consider avoiding the use of potentially vulnerable functions related to file or page processing until a patch is available. Restrict access to untrusted files and pages to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-00368

CVE-2022-47881

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 10

• https://osv.dev/vulnerability/CVE-2022-47881 · Vendor Advisory
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47881 · Security Note
• https://bdu.fstec.ru/vul/2023-00368 · Security Note
• https://foxitsoftware.com/support/security-bulletins.php · Vendor Advisory
• https://t.me/cvenotify/42293 · Telegram Post
• https://t.me/cibsecurity/56675 · Telegram Post
• https://vuldb.com/ru/?id.218919 · Note
• https://t.me/cvenotify/117769 · Telegram Post
• https://hacksys.io/advisories/HI-2022-005 · Note