Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07843
HistoryAug 09, 2022 - 12:00 a.m.

Foxit PDF Reader and PDF Editor code issues vulnerability

2022-08-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Foxit PDF Reader and PDF Editor have a code issue vulnerability that stems from a null pointer reference when this.Span is used by the oState of oStateCollab.addStateModel A null pointer reference exists when this.Span.text is used (because this.Span.text can be NULL). An attacker could exploit this vulnerability to cause a denial of service.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Related for CNVD-2023-07843