CVE-2024-30352

🗓️ 02 Apr 2024 21:15:47Reported by [email protected]Type

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This allows remote attackers to execute arbitrary code on affected installations. User interaction is required to exploit this vulnerability. The flaw exists within the handling of Doc objects, allowing an attacker to execute code in the context of the current process.

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.	12 Nov 202400:00	–	bdu_fstec
CNNVD	Foxit PDF Reader 安全漏洞	2 Apr 202400:00	–	cnnvd
CNVD	Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25649)	8 Apr 202400:00	–	cnvd
CVE	CVE-2024-30352	2 Apr 202420:15	–	cve
Cvelist	CVE-2024-30352 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability	2 Apr 202420:15	–	cvelist
EUVD	EUVD-2024-28273	3 Oct 202520:07	–	euvd
Tenable Nessus	Foxit PDF Editor < 11.2.9 Multiple Vulnerabilities	28 Apr 202400:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 12.1.5 Multiple Vulnerabilities	28 Apr 202400:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 13.1 Multiple Vulnerabilities	28 Apr 202400:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 2024.1 Multiple Vulnerabilities	5 Mar 202400:00	–	nessus