Information Disclosure Vulnerability in Foxit PDF Editor by Foxit Software

CVE-2022-37376

Summary

This vulnerability enables remote attackers to potentially access sensitive information from installations of Foxit PDF Editor 11.1.1.53537. Exploitation of this flaw requires user interaction, as the victim must visit a malicious webpage or open a compromised document. The issue is located in how arrays are handled, allowing an attacker to read beyond the limits of allocated objects through JavaScript actions. This could be exploited in combination with other vulnerabilities to execute arbitrary code under the privileges of the current process.

References