Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

CVE-2023-42090

What is CVE-2023-42090?

An information disclosure vulnerability exists in Foxit PDF Reader, specifically related to the handling of XFA Doc objects. This flaw arises from the insufficient validation of user-supplied input, allowing an attacker to read past the boundaries of allocated memory buffers. Successful exploitation requires user engagement, as victims must either visit a harmful webpage or open a crafted file that triggers the vulnerability. The implications of this vulnerability could lead to sensitive information being disclosed, especially when combined with other security weaknesses. Users are advised to exercise caution and implement security updates where applicable to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References