Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-27363

Summary

A vulnerability exists within the exportXFAData method in Foxit PDF Reader that allows for the execution of arbitrary code. This flaw exposes a JavaScript interface that can be exploited by remote attackers to write files. Successful exploitation requires user interaction, as the target must either visit a malicious webpage or open a compromised file. This could lead to severe consequences for affected installations, as it allows attackers to run code in the context of the current user.

References