Lucene search
PRIOn knowledge basePRION:CVE-2022-24907HistoryMar 28, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-03-2819:15:00
PRIOn knowledge base
www.prio-n.com
3
remote code execution
user interaction
jp2 images
allocated buffer
zdi-can-16186
0.015 Low
EPSS
Percentile
87.1%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16186.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pdf_editor | lt | 10.1.7 | |
| pdf_editor | ge | 11.0.0 | |
| pdf_editor | lt | 11.2.1 | |
| pdf_reader | lt | 11.2.1 |
Related
cve
cve
CVE-2022-24907
2023-03-28 19:15:10
cvelist
cvelist
CVE-2022-24907
2023-03-28 00:00:00
nvd
nvd
CVE-2022-24907
2023-03-28 19:15:10
zdi
zdi
cnvd
cnvd
Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-49839)
2022-02-17 00:00:00
nessus
nessus
Foxit PhantomPDF < 10.1.7 Multiple Vulnerabilities
2022-03-03 00:00:00
Foxit PDF Reader < 11.2.1 Multiple Vulnerabilities
2022-01-29 00:00:00
Foxit PDF Editor < 11.2.1 Multiple Vulnerabilities
2022-01-29 00:00:00
kaspersky
kaspersky
KLA12437 Multiple vulnerabilities in Foxit PDF Reader
2022-01-28 00:00:00