Lucene search

Kaspersky LabKLA48514

HistoryFeb 21, 2023 - 12:00 a.m.

KLA48514 Multiple vulnerabilities in Foxit PDF Reader

2023-02-2100:00:00

Kaspersky Lab

threats.kaspersky.com

foxit pdf reader

foxit pdf editor

use after free

arbitrary code execution

denial of service

cve-2023-27331

cve-2023-27329

cve-2023-27330

update required

ace

dos

security advisory

impacts

affected products

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

Use After Free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Original advisories

Security updates available in Foxit PDF Reader 11.2.1 and Foxit PDF Editor 11.2.2

Related products

Foxit-Reader

Foxit-Reader-Enterprise

CVE list

CVE-2023-27331 unknown

CVE-2023-27329 unknown

CVE-2023-27330 unknown

Solution

Update to the latest version

Download Foxit Reader

Impacts

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.