Multiple vulnerabilities in Foxit Reader

Description

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. Code execution vulnerability can be exploited via special crafted file to execute arbitrary code.
2. Use after free vulnerability can be exploited remotely to cause denial of service, obtain sensitive information or execute arbitrary code.
3. Use after free vulnerability can be exploited to cause denial of service, obtain sensitive information or execute arbitrary code.
4. Use after free vulnerability can be exploited remotely to obtain sensitive information or execute arbitrary code.
5. Out of bounds read vulnerability can be exploited via special PDF files to obtain sensitive information.
6. Heap-based buffer overflow vulnerability can be exploited remotely to execute arbitrary code and cause denial of service.
7. Information disclosure vulnerability can be exploited to obtain sensitive information.

Original advisories

• Foxit Security Bulletins

Exploitation

Public exploits exist for this vulnerability.

Related products

• Foxit-Reader

CVE list

• CVE-2021-40326
  high
• CVE-2021-41785
  critical
• CVE-2021-41783
  critical
• CVE-2021-41780
  critical
• CVE-2021-41781
  critical
• CVE-2021-41782
  critical
• CVE-2021-41784
  critical
• CVE-2021-34952
  unknown
• CVE-2021-34962
  unknown
• CVE-2021-34950
  unknown
• CVE-2021-34958
  unknown
• CVE-2021-34957
  unknown
• CVE-2021-34963
  unknown
• CVE-2021-34948
  unknown
• CVE-2021-34960
  unknown
• CVE-2021-34973
  unknown
• CVE-2021-34951
  unknown
• CVE-2021-34956
  unknown
• CVE-2021-34967
  unknown
• CVE-2021-34971
  unknown
• CVE-2021-34975
  unknown
• CVE-2021-34953
  unknown
• CVE-2021-34976
  unknown
• CVE-2021-34959
  unknown
• CVE-2021-34955
  unknown
• CVE-2021-34966
  unknown
• CVE-2021-34965
  unknown
• CVE-2021-34970
  unknown
• CVE-2021-34968
  unknown
• CVE-2021-34974
  unknown
• CVE-2021-34972
  unknown
• CVE-2021-34949
  unknown
• CVE-2021-34961
  unknown
• CVE-2021-34954
  unknown
• CVE-2021-34964
  unknown
• CVE-2021-34969
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com