Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2023-38116

3.3LOW

Key Information:

Vendor

Foxit
Status
PDF Reader
Vendor
CVE Published:
3 May 2024

What is CVE-2023-38116?

A vulnerability in Foxit PDF Reader allows remote attackers to disclose sensitive information. The flaw is associated with the handling of Doc objects, specifically due to improper validation of user-supplied data. This deficiency may lead to a read operation beyond the allocated buffer, potentially exposing confidential information. Successful exploitation requires user interaction, as the victim needs to visit a malicious page or open a compromised PDF document. Attackers can leverage this vulnerability in conjunction with others to gain deeper access within the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PDF Reader 12.1.2.15332

References

https://www.zerodayinitiative.com/advisories/ZDI-23-994/
x_research-advisory
https://www.foxit.com/support/security-bulletins.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.