Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2024-9248

7.8HIGH

Key Information:

Vendor

Foxit
Status
PDF Reader
Vendor
CVE Published:
22 November 2024

What is CVE-2024-9248?

A vulnerability in Foxit PDF Reader allows for remote code execution through improper validation of user-supplied data during PDF file parsing. Attackers can exploit this flaw by convincing users to open a specially crafted PDF file or visit a malicious link. This exploitation could lead to arbitrary code execution within the context of the application, exposing systems to potential unauthorized access and exploitation. To mitigate risks, users should ensure they are using the latest version of Foxit PDF Reader and be cautious when interacting with unknown or suspicious files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PDF Reader 2024.2.2.25170

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1302/
x_research-advisory
https://www.foxit.com/support/security-bulletins.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.