PT-2021-22215 · Foxit · Foxit Pdf Editor+1

Published 2021-08-11 · Updated 2022-07-12 · CVE-2021-38566

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1

Description An issue in the software allows stack consumption during recursive processing of embedded XML nodes.

Recommendations For Foxit PDF Reader versions prior to 11.0.1, update to version 11.0.1 or later. For Foxit PDF Editor versions prior to 11.0.1, update to version 11.0.1 or later.

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2021-38566

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 3

• https://foxitsoftware.com/support/security-bulletins.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38566 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38566 · Security Note