Code injection

2022-01-0415:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.

CPENameOperatorVersion
pdf_editorlt11.1
pdf_readerlt11.1

CPE	Name	Operator	Version
	pdf_editor	lt	11.1
	pdf_reader	lt	11.1

References

github.com/dlehgus1023

github.com/dlehgus1023/CVE/tree/master/CVE-2021-45979

www.foxit.com/support/security-bulletins.html