Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

CVE-2023-42093

What is CVE-2023-42093?

A vulnerability in Foxit PDF Reader enables remote attackers to disclose sensitive information through an exploitation technique that involves the mishandling of Annotation objects. The lack of validation for object existence prior to operations allows attackers to leverage this flaw alongside additional vulnerabilities, potentially leading to arbitrary code execution within the affected instance. User interaction is necessary, requiring the user to either open a malicious file or visit a compromised webpage to trigger the vulnerability. For further details, refer to the advisory provided by the vendor and ZDI advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References