PT-2022-25230 · Foxit · Foxit Pdf Reader

Aleksandar Nikolic · Published 2022-11-14 · Updated 2022-12-27 · CVE-2022-40129

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit Software's PDF Reader version 12.0.1.12430

Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

Recommendations For Foxit Software's PDF Reader version 12.0.1.12430, consider disabling the JavaScript engine or the browser plugin extension as a temporary workaround until a patch is available. Avoid opening suspicious PDF documents or visiting untrusted websites with the browser plugin extension enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-40129

Affected Products

Foxit Pdf Reader

References · 6

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1614 · Exploit
• https://osv.dev/vulnerability/CVE-2022-40129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40129 · Security Note
• https://t.me/true_secator/3700 · Telegram Post
• https://t.me/cibsecurity/53245 · Telegram Post
• https://t.me/cvenotify/38188 · Telegram Post