Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

CVE-2023-38110

What is CVE-2023-38110?

A vulnerability in Foxit PDF Reader can lead to information disclosure due to improper handling of Doc objects. The flaw results from inadequate validation of user-supplied data, allowing attackers to read beyond the allocated buffer. By exploiting this vulnerability, an attacker requires user interaction, such as visiting a specially crafted webpage or opening a malicious PDF file, which can potentially lead to unauthorized access of sensitive information. This vulnerability, if combined with other weaknesses, might allow for further exploits like arbitrary code execution within the same process context.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References