PT-2023-7348 · Foxit · Foxit Pdf Reader

Kamlapati Choubey · Published 2023-11-27 · Updated 2023-12-01 · CVE-2023-40194

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions 12.1.3.15356

Description The issue is related to errors in processing hyperlinks and mistreatment of whitespace characters in the Javascript exportDataObject API. This can allow a remote attacker to execute arbitrary code. A specially crafted malicious file can create files at arbitrary locations, leading to code execution. Exploitation is possible if a user opens the malicious file or visits a specially crafted site with the browser plugin extension enabled.

Recommendations For version 12.1.3.15356, consider disabling the Javascript exportDataObject API until a patch is available. Restrict access to the browser plugin extension to minimize the risk of exploitation. Avoid opening suspicious files or visiting untrusted sites with the browser plugin extension enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-610

CWE-73

Related Identifiers

BDU:2023-08379

CVE-2023-40194

Affected Products

Foxit Pdf Reader

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1833 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-40194 · Security Note
• https://bdu.fstec.ru/vul/2023-08379 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40194 · Vendor Advisory
• https://t.me/cvenotify/61940 · Telegram Post