PT-2022-23931 · Foxit · Foxit Pdf Reader

Aleksandar Nikolic · Published 2022-11-14 · Updated 2022-12-27 · CVE-2022-37332

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit Software's PDF Reader version 12.0.1.12430

Description A use-after-free issue exists in the JavaScript engine, allowing arbitrary code execution through the misuse of the media player API. This can be triggered by opening a specially-crafted PDF document or visiting a malicious site with the browser plugin extension enabled. An attacker must trick the user into opening the malicious file to exploit this issue.

Recommendations For version 12.0.1.12430, consider disabling the JavaScript engine or the browser plugin extension as a temporary workaround until a patch is available. Restrict access to malicious sites and avoid opening untrusted PDF documents to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-37332

Affected Products

Foxit Pdf Reader

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1602 · Exploit
• https://osv.dev/vulnerability/CVE-2022-37332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37332 · Security Note
• https://t.me/cibsecurity/53256 · Telegram Post
• https://t.me/true_secator/3700 · Telegram Post