Vulnerabilities fixed in Foxit PDF Reader and PDF Editor

🗓️ 31 Dec 2024 09:22:24Reported by NCSCType

Foxit fixed remote code execution, memory corruption, local privilege escalation, and use after free flaws in Foxit Reader and Editor.

Reporter	Title	Published	Views	Family All 69
BDU FSTEC	The vulnerability of the CBF_Widget object handler in the PDF electronic document viewing software Foxit PDF Reader (formerly Foxit Reader) allows a perpetrator to execute arbitrary code.	23 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AcroForm component in the PDF Foxit Reader software (formerly Foxit Reader) allows a perpetrator to execute arbitrary code.	3 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AcroForms component of the PDF e-mail viewing software, Foxit PDF Reader (formerly Foxit Reader), allows a hacker to execute arbitrary code.	21 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the incorrect handling of links before accessing the file. This allows attackers to exploit this flaw to gain increased privileges.	22 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in its memory usage after decompression. This allows a hacker to execute arbitrary code.	27 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-12751	30 Dec 202405:00	–	circl
Circl	CVE-2024-12752	30 Dec 202405:00	–	circl
Circl	CVE-2024-12753	30 Dec 202405:00	–	circl
Circl	CVE-2024-47810	18 Dec 202415:59	–	circl
Circl	CVE-2024-49576	18 Dec 202415:59	–	circl

Source	Link
foxit	www.foxit.com/support/security-bulletins.html

31 Dec 2024 09:22Current

8.7High risk

Vulners AI Score8.7

CVSS 37.8

CVSS 3.17.3 - 8.8

EPSS0.03436

SSVC