PT-2023-7349 · Foxit · Foxit Reader

Kamlapati Choubey · Published 2023-11-27 · Updated 2023-12-01 · CVE-2023-39542

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader version 12.1.3.15356

Description A code execution issue exists in the Javascript saveAs API of Foxit Reader. This is due to the improper handling of specially crafted malformed files, which can lead to the creation of arbitrary files and potentially result in remote code execution. An attacker must trick the user into opening a malicious file to exploit this issue. Additionally, exploitation is possible if a user visits a specially crafted malicious site when the browser plugin extension is enabled.

Recommendations For Foxit Reader version 12.1.3.15356, consider disabling the Javascript saveAs API until a patch is available to prevent potential code execution. Restrict access to malicious sites and avoid opening untrusted files to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-73

CWE-610

Related Identifiers

BDU:2023-08380

CVE-2023-39542

Affected Products

Foxit Reader

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832 · Exploit
• https://osv.dev/vulnerability/CVE-2023-39542 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39542 · Security Note
• https://bdu.fstec.ru/vul/2023-08380 · Security Note
• https://t.me/cvenotify/61939 · Telegram Post