Kaspersky LabKLA12241KLA12241 Multiple vulnerabilities in Foxit Reader
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.1 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
84.6%
Detect date:
07/27/2021
Severity:
Warning
Description:
Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.
Affected products:
Foxit Reader earlier than 11.0.1
Solution:
Update to the latest version
Download Foxit Reader
Original advisories:
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2021-218318.8Critical
CVE-2021-218938.8Critical
CVE-2021-218708.8Critical
CVE-2021-348467.8Critical
CVE-2021-348407.8Critical
CVE-2021-348337.8Critical
CVE-2021-348457.8Critical
CVE-2021-348487.8Critical
CVE-2021-348317.8Critical
CVE-2021-348537.8Critical
CVE-2021-348387.8Critical
CVE-2021-348437.8Critical
CVE-2021-348397.8Critical
CVE-2021-348347.8Critical
CVE-2021-348497.8Critical
CVE-2021-348517.8Critical
CVE-2021-348377.8Critical
CVE-2021-348447.8Critical
CVE-2021-348427.8Critical
CVE-2021-348507.8Critical
CVE-2021-348327.8Critical
CVE-2021-348527.8Critical
CVE-2021-348367.8Critical
CVE-2021-348417.8Critical
CVE-2021-348357.8Critical
CVE-2021-348477.8Critical
CVE-2021-385649.1Critical
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21831
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21870
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21893
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34831
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34832
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34833
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34834
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34835
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34836
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34837
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34838
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34839
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34840
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34841
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34842
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34843
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34844
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34845
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34846
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34847
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34848
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34849
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34850
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34851
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34852
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34853
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38564
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Foxit-Reader/
www.foxit.com/support/security-bulletins.html
www.foxitsoftware.com/downloads/#Foxit-Reader
Related
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.1 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
84.6%