PT-2024-8056 · Foxit · Foxit Pdf Reader+1

Published 2024-03-05 · Updated 2024-04-03 · CVE-2024-30358

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader (affected versions not specified) Foxit PDF Editor (affected versions not specified)

Description: The issue is related to a use-after-free vulnerability in the AcroForm Handler component. This vulnerability can be exploited by remote attackers to execute arbitrary code on affected installations by using a specially crafted PDF file. The flaw exists within the handling of AcroForms due to the lack of validation of an object's existence before performing operations on it. User interaction is required to exploit this vulnerability, such as visiting a malicious page or opening a malicious file.

Recommendations: For Foxit PDF Reader, update to a version that includes a fix for the AcroForm Handler component use-after-free vulnerability. For Foxit PDF Editor, update to a version that includes a fix for the AcroForm Handler component use-after-free vulnerability. As a temporary workaround, consider disabling the handling of AcroForms in Foxit PDF Reader and Foxit PDF Editor until a patch is available.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-09575

CVE-2024-30358

ZDI-24-330

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 6

• https://zerodayinitiative.com/advisories/ZDI-24-330 · Security Note
• https://bdu.fstec.ru/vul/2024-09575 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-30358 · Security Note
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-30358 · Vendor Advisory
• https://twitter.com/CVEnew/status/1775258385404793342 · Twitter Post