Remote Code Execution Vulnerability in Foxit PDF Reader AcroForm Signature
CVE-2023-51551

Currently unrated

Key Information:

Vendor

Foxit
Status
PDF Editor
PDF Reader
Vendor
CVE Published:
3 May 2024

What is CVE-2023-51551?

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of Signature objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22003.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1873/
https://www.foxit.com/support/security-bulletins.html

Timeline

  • Vulnerability published

JSON
.