KLA11115
Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities was found in Foxit Reader 8.3.2.25013. This vulnerability can be exploited locally via a specially designed .pdf file to cause denial of service, execute arbitrary code or obtain sensetive informatoin.

1. Type confusion vulnerabilities can be exploited remotely file possibly to execute arbitrary code;
2. Use after free vulnerabilities can be exploited remotely possibly to execute arbitrary code;
3. Out of bounds vulnerabilities can be exploited remotely possibly to obtain sensitive information;
4. Unspecified vulnerability can be exploited remotely possibly to execute arbitrary code or cause denial of service;
5. Buffer overflow vulnerability can be exploited remotely possibly to execute arbitrary code or cause denial of service;

Technical details

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Foxit Reader 8.3.2.25013 and previous versions

Update to latest version
Foxit PDF Reader