Remote Code Execution Vulnerability in Foxit Studio Photo by Foxit Software

CVE-2020-17431

What is CVE-2020-17431?

A security vulnerability exists in Foxit Studio Photo 3.6.6.922 that enables remote attackers to execute arbitrary code. The flaw arises from inadequate validation of user-supplied data during the parsing of CR2 files. To exploit this vulnerability, an attacker must convince a user to open a malicious file or visit a harmful webpage, allowing them to write past an allocated structure's end within the application. This could potentially lead to unauthorized code execution in the context of the current process, exposing users to severe risks.

References