Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability

CVE-2021-34976

Summary

The vulnerability in Foxit PDF Reader arises from a flaw in the processing of PDF files, where the absence of validation for object existence before executing operations can lead to sensitive information being disclosed. An attacker can exploit this vulnerability by luring users into visiting a malicious webpage or opening a crafted PDF file. This exploitation may open pathways for further attacks by leveraging this weakness alongside other vulnerabilities, potentially allowing arbitrary code execution within the context of the running process.

References