Multiple vulnerabilities in Foxit Reader

Description

Multiple vulnerabilities was found in Foxit Reader 8.3.2.25013. This vulnerability can be exploited locally via a specially designed .pdf file to cause denial of service, execute arbitrary code or obtain sensetive informatoin.

1. Type confusion vulnerabilities can be exploited remotely file possibly to execute arbitrary code;
2. Use after free vulnerabilities can be exploited remotely possibly to execute arbitrary code;
3. Out of bounds vulnerabilities can be exploited remotely possibly to obtain sensitive information;
4. Unspecified vulnerability can be exploited remotely possibly to execute arbitrary code or cause denial of service;
5. Buffer overflow vulnerability can be exploited remotely possibly to execute arbitrary code or cause denial of service;

---

Technical details

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Original advisories

• Foxit Security Bulletins

Related products

• Foxit-Reader

CVE list

• CVE-2017-14694
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com