Remote Code Execution Vulnerability in Foxit PDF Reader
CVE-2024-30362

7.8HIGH

Key Information:

Vendor

Foxit
Status
PDF Reader
Vendor
CVE Published:
2 April 2024

What is CVE-2024-30362?

A flaw has been identified in Foxit PDF Reader that arises from inadequate validation during the parsing of PDF files. Specifically, this vulnerability permits remote attackers to execute arbitrary code on affected systems, contingent on user interaction, which typically involves visiting a malicious webpage or opening a compromised file. The underlying issue stems from the absence of validation to check the existence of an object before executing operations on it. This lack of verification paves the way for potential exploitation, making it crucial for users to be cautious when handling PDF files from unknown sources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PDF Reader 2023.3.0.23028

References

https://www.zerodayinitiative.com/advisories/ZDI-24-339/
x_research-advisory
https://www.foxit.com/support/security-bulletins.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.