Information Disclosure Vulnerability in Foxit Studio Photo Software

CVE-2020-17420

Summary

This vulnerability in Foxit Studio Photo 3.6.6.922 enables remote attackers to disclose sensitive information. Exploitation requires user interaction, as the target must visit a malicious webpage or open an affected NEF file. The flaw arises from inadequate validation of user-supplied NEF file data, potentially allowing attackers to read beyond the allocated structure. By leveraging this weakness alongside other vulnerabilities, an attacker could execute arbitrary code in the context of the affected process.

References