Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2024-17008)

2024-04-0300:00:00

China National Vulnerability Database

www.cnvd.org.cn

foxit pdf reader

cnvd-2024-17008

acroforms

remote code execution

arbitrary code

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

49.0%

JSON

Foxit PDF Reader is Foxit’s first simplified Chinese version of the PDF document reader. A remote code execution vulnerability exists in Foxit PDF Reader. The vulnerability is related to the handling of AcroForms and is caused by failing to validate an object before performing an operation on it. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process.