Beschreibung
Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code.
Below is a complete list of vulnerabilities:
- An improper validation of user-supplied data in the saveAs Java script function can be exploited remotely via a specially designed page or file to execute arbitrary code;
- An improper validation of a user-supplied string before using it to execute a system call in the app.launchURL method can be exploited remotely via a specially designed page or file to execute arbitrary code.
- An improper validation vulnerability can be exploited remotely to execute arbitrary code.
NB: These vulnerabilities do not have any public CVSS ratings, so rating can be changed by the time.
Ursprüngliche Informationshinweise
CVE Liste
- CVE-2017-10953 high
- CVE-2017-10951 high
- CVE-2017-10952 high
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!