Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-27365

What is CVE-2023-27365?

A vulnerability in Foxit PDF Editor's handling of DOC file parsing permits remote attackers to execute arbitrary code on user systems. This flaw stems from inadequate restrictions placed on macro-enabled documents, allowing malicious actors to take advantage of the vulnerability when users interact with compromised documents or visit harmful web pages. The risk is exacerbated by the requirement of user interaction for successful exploitation, which highlights the importance of cautious handling of document files from untrusted sources.

References