Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2024-9247

Summary

A vulnerability has been identified within Foxit PDF Reader that allows remote attackers to execute arbitrary code through a specific flaw in the handling of Annotation objects. This issue arises from inadequate validation of user-supplied data, which may lead to a write operation occurring before the start of an allocated object in memory. To exploit this vulnerability, an attacker must entice a user to visit a malicious webpage or open a compromised PDF file. Proper measures and updates are necessary to mitigate potential risks associated with this flaw.

References