PT-2022-6199 · Foxit · Foxit Pdf Reader

Aleksandar Nikolic · Published 2022-01-31 · Updated 2022-06-16 · CVE-2022-22150

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543

Description A memory corruption issue exists in the JavaScript engine of Foxit PDF Reader. This issue can be triggered by a specially-crafted PDF document, causing an exception that is improperly handled and leaving the engine in an invalid state. This can lead to memory corruption and arbitrary code execution. An attacker can exploit this by tricking a user into opening a malicious file or by having the user visit a specially-crafted malicious site if the browser plugin extension is enabled.

Recommendations For Foxit PDF Reader version 11.1.0.52543, consider disabling the JavaScript engine until a patch is available to prevent exploitation. Restrict access to malicious PDF documents and avoid visiting untrusted websites with the browser plugin extension enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-460

Related Identifiers

BDU:2023-00467

CVE-2022-22150

Affected Products

Foxit Pdf Reader

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439 · Exploit
• https://safe-surf.ru/specialists/bulletins-nkcki/674669 · Security Note
• https://bdu.fstec.ru/vul/2023-00467 · Security Note
• https://safe-surf.ru/upload/VULN/VULN-20220202.5.pdf · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22150 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22150 · Vendor Advisory
• https://t.me/cibsecurity/36901 · Telegram Post