PT-2022-6132 · Foxit · Foxit Pdf Reader

Aleksandar Nikolic · Published 2022-02-04 · Updated 2022-07-28 · CVE-2021-40420

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543

Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. This vulnerability can be triggered by a specially-crafted PDF document, leading to the reuse of previously freed memory, which can result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site when the browser plugin extension is enabled.

Recommendations For Foxit PDF Reader version 11.1.0.52543, consider disabling the JavaScript engine until a patch is available to prevent exploitation. Restrict access to malicious PDF documents and avoid visiting untrusted websites with the browser plugin extension enabled.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2023-00098

CVE-2021-40420

Affected Products

Foxit Pdf Reader

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1429 · Exploit
• https://safe-surf.ru/specialists/bulletins-nkcki/674669 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-40420 · Security Note
• https://bdu.fstec.ru/vul/2023-00098 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40420 · Vendor Advisory
• https://t.me/cvenotify/29461 · Telegram Post
• https://t.me/cvenotify/33943 · Telegram Post