Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability

CVE-2024-9243

What is CVE-2024-9243?

A vulnerability exists in Foxit PDF Reader related to the handling of AcroForms that allows remote attackers to execute arbitrary code. This flaw stems from insufficient validation of object existence prior to performing operations, thereby enabling unauthorized code execution in the context of the current process. To exploit this vulnerability, an attacker must entice the user to visit a malicious website or open a maliciously crafted PDF file.

References