Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA20039
HistoryNov 07, 2022 - 12:00 a.m.

KLA20039 Multiple vulnerabilities in Foxit PDF Reader

2022-11-0700:00:00
Kaspersky Lab
threats.kaspersky.com
25
foxit pdf reader
denial of service
exploitation
cve-2022-38097
cve-2022-32774
cve-2022-40129
update required

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

79.1%

JSON

Use after free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to cause denial of service.

Original advisories

Security updates available in Foxit PDF Reader 12.0.2 and Foxit PDF Editor 12.0.2

Exploitation

Public exploits exist for this vulnerability.

Related products

Foxit-Reader

Foxit-Reader-Enterprise

CVE list

CVE-2022-38097 critical

CVE-2022-32774 critical

CVE-2022-40129 critical

CVE-2022-37332 critical

Solution

Update to the latest version

Download Foxit Reader

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Foxit PDF Reader earlier than 12.0.2

Related

talosblog 1
openvas 1
nessus 4
prion 4
nvd 4
cvelist 4
cve 4
cnvd 4
talos 5
githubexploit 1
talosblog
talosblog
Vulnerability Spotlight: Use-after-free vulnerabilities in Foxit Reader could lead to arbitrary code execution
2022-11-10 20:27:19
openvas
openvas
Foxit Reader < 12.0.2 Multiple Vulnerabilities (Jan 2023)
2023-01-30 00:00:00
nessus
nessus
Foxit PDF Editor < 11.2.4 Multiple Vulnerabilities
2022-12-23 00:00:00
Foxit PhantomPDF < 10.1.10 Multiple Vulnerabilities
2022-12-27 00:00:00
Foxit PDF Reader < 12.0.2 Multiple Vulnerabilities
2022-11-08 00:00:00
prion
prion
Design/Logic Flaw
2022-11-21 16:15:00
Design/Logic Flaw
2022-11-21 16:15:00
Design/Logic Flaw
2022-11-21 16:15:00
nvd
nvd
CVE-2022-38097
2022-11-21 16:15:12
CVE-2022-37332
2022-11-21 16:15:12
CVE-2022-32774
2022-11-21 16:15:12
cvelist
cvelist
CVE-2022-32774
2022-11-21 16:05:35
CVE-2022-38097
2022-11-21 16:05:37
CVE-2022-37332
2022-11-21 16:05:36
cve
cve
CVE-2022-37332
2022-11-21 16:15:12
CVE-2022-38097
2022-11-21 16:15:12
CVE-2022-32774
2022-11-21 16:15:12
cnvd
cnvd
Foxit PDF Reader Memory Misquoting Vulnerability (CNVD-2023-07827)
2022-11-14 00:00:00
Foxit PDF Reader Memory Misquoting Vulnerability (CNVD-2023-07828)
2022-11-14 00:00:00
Foxit PDF Reader Memory Misquoting Vulnerability (CNVD-2023-07826)
2022-11-14 00:00:00
talos
talos
Foxit Reader annotation destroy use-after-free vulnerability
2022-11-10 00:00:00
Foxit Reader deletePages Field Calculate use-after-free vulnerability
2022-11-10 00:00:00
Foxit Reader openPlayer use-after-free vulnerability
2022-11-10 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Foxit Pdf Reader
2023-01-19 02:41:54

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

79.1%

JSON
Related for KLA20039
talosblog1openvas1nessus4prion4nvd4cvelist4cve4cnvd4talos5githubexploit1