Multiple serious vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An use-after-free vulnerability in the AFParseDateEx function can be exploited remotely to execute arbitrary code;
2. An out-of-bounds read vulnerability in the PDF file parsing can be exploited remotely to btain sensitive information;
3. An out-of-bounds read vulnerability in the ObjStm objects parsing can be exploited remotely to btain sensitive information;
4. An use-after-free vulnerability in the app.alert function can be exploited remotely to execute arbitrary code;
5. A potential use-before-initialization vulnerabilitythe gotoURL method can be exploited to execute arbitrary code.

Foxit Reader 8.3.0.14878 and earlier

Update to the latest version
Foxit Reader

Foxit Security Bulletins