Remote Information Disclosure Vulnerability in Foxit Studio Photo by Foxit

CVE-2020-17428

Summary

This vulnerability enables remote attackers to expose sensitive information in installations of Foxit Studio Photo 3.6.6.922. It arises from inadequate validation of user-supplied data while handling CMP files. Successful exploitation requires user interaction, as the target must either visit a malicious URL or open a compromised file. An attacker can exploit this flaw to read beyond allocated data structures, potentially leveraging it alongside other vulnerabilities to execute code within the affected process context.

References