Use-After-Free Vulnerability in Foxit PDF Reader and Editor
CVE-2021-41781

7.8HIGH

Key Information:

Vendor

Foxit
Status
PDF Editor
PDF Reader
PhantomPDF
Vendor
CVE Published:
29 August 2022

What is CVE-2021-41781?

Foxit PDF Reader, Foxit PDF Editor, and PhantomPDF exhibit a vulnerability that allows attackers to exploit mishandled JavaScript, resulting in a use-after-free condition. This flaw can enable unauthorized users to execute arbitrary code, potentially compromising the affected systems. Users are advised to upgrade to the latest versions to mitigate these risks.

References

https://www.foxit.com/support/security-bulletins.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.