The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.

🗓️ 11 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Memory after free flaw in Foxit Reader and Foxit PhantomPDF enables remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-10907	29 Nov 202314:50	–	circl
CNVD	Foxit Reader and PhantomPDF Resource Management Error Vulnerability	17 Apr 202000:00	–	cnvd
CVE	CVE-2020-10907	22 Apr 202020:51	–	cve
Cvelist	CVE-2020-10907	22 Apr 202020:51	–	cvelist
EUVD	EUVD-2020-3313	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10907	22 Apr 202021:15	–	nvd
OSV	CVE-2020-10907	22 Apr 202021:15	–	osv
Prion	Design/Logic Flaw	22 Apr 202021:15	–	prion
RedhatCVE	CVE-2020-10907	9 Jan 202608:36	–	redhatcve
ThreatPost	Foxit PDF Reader, PhantomPDF Open to Remote Code Execution	20 Apr 202018:18	–	threatpost

Vulners

Node

foxit_software pdf_editorRange≤9.7.1.29511

OR

foxit_software pdf_readerRange≤9.7.1.29511

Source	Link
cxsecurity	www.cxsecurity.com/cveshow/CVE-2020-10907/
foxitsoftware	www.foxitsoftware.com/support/security-bulletins.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-535/
web	www.web.nvd.nist.gov/view/vuln/detail

11 Mar 2021 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38.8

CVSS 210

EPSS0.04787

Foxit Reader vulnerability Foxit PhantomPDF flaw memory after free remote code execution