Lucene search
PRIOn knowledge basePRION:CVE-2020-13547HistoryDec 22, 2020 - 7:15 p.m.
Type confusion
2020-12-2219:15:00
PRIOn knowledge base
www.prio-n.com
2
0.002 Low
EPSS
Percentile
59.1%
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| foxit_reader | eq | 10.0.0.37527 |
Related
cvelist
cvelist
CVE-2020-13547
2020-12-22 18:59:28
talos
talos
Foxit Reader JavaScript media openPlayer type confusion vulnerability
2020-12-09 00:00:00
cve
cve
CVE-2020-13547
2020-12-22 19:15:13
nvd
nvd
CVE-2020-13547
2020-12-22 19:15:13
kaspersky
kaspersky
KLA12028 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF
2020-12-09 00:00:00
nessus
nessus
Foxit PhantomPDF < 9.7.5 Multiple Vulnerabilities
2020-12-30 00:00:00
Foxit Reader < 10.1.1 Multiple Vulnerabilities
2020-12-23 00:00:00
Foxit PhantomPDF < 10.1.1 Multiple Vulnerabilities
2020-12-23 00:00:00