Remote Information Disclosure in Foxit Studio Photo by Foxit Software

CVE-2020-17422

What is CVE-2020-17422?

This vulnerability affects Foxit Studio Photo versions, allowing remote attackers to disclose sensitive information. Exploitation requires user interaction, such as visiting a malicious webpage or opening a harmful file. The flaw originates from improper validation of user-supplied EPS file data, leading to potential information leaks as the process may read beyond allocated memory structures. Attackers can combine this vulnerability with other exploits to execute arbitrary code within the affected application context.

References