Information Disclosure Vulnerability in Foxit PDF Reader

CVE-2024-9251

Summary

This vulnerability exists in Foxit PDF Reader due to improper handling of Annotation objects. Attackers can exploit this flaw, enabling them to disclose sensitive information by tricking users into opening malicious files or visiting harmful web pages. The exploitation occurs because the software fails to validate the existence of an object before performing operations on it. When successfully executed, this vulnerability can be combined with other weaknesses, leading to potentially severe implications for information integrity. Users and organizations using affected versions of Foxit PDF Reader should consider implementing security best practices and monitor for updates from the vendor.

References