Multiple vulnerabilities in Foxit Reader

Description

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability can be exploited to execute arbitrary code.
2. Use after free vulnerability can be exploited to cause denial of service.
3. Use after free vulnerability can be exploited to cause denial of service and execute arbitrary code.
4. Information disclosure and out of bounds read vulnerability in the util.scand function can be exploited to obtain sensitive information and cause denial of service.

Original advisories

• Foxit Security Bulletins

Exploitation

Public exploits exist for this vulnerability.

Related products

• Foxit-Reader

CVE list

• CVE-2021-21831
  critical
• CVE-2021-21893
  critical
• CVE-2021-21870
  critical
• CVE-2021-34846
  critical
• CVE-2021-34840
  critical
• CVE-2021-34833
  critical
• CVE-2021-34845
  critical
• CVE-2021-34848
  critical
• CVE-2021-34831
  critical
• CVE-2021-34853
  critical
• CVE-2021-34838
  critical
• CVE-2021-34843
  critical
• CVE-2021-34839
  critical
• CVE-2021-34834
  critical
• CVE-2021-34849
  critical
• CVE-2021-34851
  critical
• CVE-2021-34837
  critical
• CVE-2021-34844
  critical
• CVE-2021-34842
  critical
• CVE-2021-34850
  critical
• CVE-2021-34832
  critical
• CVE-2021-34852
  critical
• CVE-2021-34836
  critical
• CVE-2021-34841
  critical
• CVE-2021-34835
  critical
• CVE-2021-34847
  critical
• CVE-2021-38564
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com