KLA20171 ACE vulnerability in Foxit PDF Reader

Use after free vulnerability was found in Foxit PDF Reader. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service.

Original advisories

Security updates available in Foxit PDF Reader 12.1 and Foxit PDF Editor 12.1

Related products

Foxit-Reader

Foxit-Reader-Enterprise

CVE list

CVE-2022-43649 critical

Solution

Update to the latest version

Download Foxit Reader

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Foxit PDF Reader earlier than 12.0.2