PT-2024-8057 · Foxit · Foxit Pdf Reader+1

Published 2024-03-05 · Updated 2024-04-03 · CVE-2024-30360

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader (affected versions not specified) Foxit PDF Editor (affected versions not specified)

Description: The issue is related to a use-after-free vulnerability in the AcroForm Handler component. This vulnerability can be exploited by remote attackers to execute arbitrary code on affected installations by using a specially crafted PDF file. The flaw exists within the handling of AcroForms due to the lack of validation of an object's existence before performing operations on it. User interaction is required to exploit this vulnerability, such as visiting a malicious page or opening a malicious file.

Recommendations: For Foxit PDF Reader, update to a version that fixes the use-after-free vulnerability in the AcroForm Handler component. For Foxit PDF Editor, update to a version that fixes the use-after-free vulnerability in the AcroForm Handler component. As a temporary workaround, consider disabling the handling of AcroForms in both Foxit PDF Reader and Foxit PDF Editor until a patch is available.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-09576

CVE-2024-30360

ZDI-24-340

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 6

• https://zerodayinitiative.com/advisories/ZDI-24-340 · Security Note
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09576 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-30360 · Security Note
• https://osv.dev/vulnerability/CVE-2024-30360 · Vendor Advisory
• https://twitter.com/CVEnew/status/1775258383135719779 · Twitter Post