Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVE-2023-27329

Summary

A vulnerability in Foxit PDF Reader's handling of Annotation objects permits remote code execution by allowing attackers to exploit the lack of existence validation for these objects. This flaw enables the execution of arbitrary code within the context of the affected process, contingent upon user interaction. Users must be lured into visiting a compromised webpage or opening a malicious PDF document to trigger the exploit, highlighting the importance of vigilance when dealing with untrusted documents or URLs.

References