Lucene search
PRIOn knowledge basePRION:CVE-2022-32774HistoryNov 21, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-11-2116:15:00
PRIOn knowledge base
www.prio-n.com
5
use-after-free
javascript engine
foxit software
pdf reader
arbitrary code execution
specially-crafted
malicious file
browser plugin extension.
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pdf_reader | eq | 12.0.1.12430 |
Related
cvelist
cvelist
CVE-2022-32774
2022-11-10 00:00:00
cnvd
cnvd
Foxit PDF Reader Memory Misquoting Vulnerability (CNVD-2023-07828)
2022-11-14 00:00:00
nvd
nvd
CVE-2022-32774
2022-11-21 16:15:12
cve
cve
CVE-2022-32774
2022-11-21 16:15:12
talos
talos
Foxit Reader deletePages Field Calculate use-after-free vulnerability
2022-11-10 00:00:00
Foxit Reader Field Calculate event use-after-free vulnerability
2023-07-19 00:00:00
kaspersky
kaspersky
KLA20039 Multiple vulnerabilities in Foxit PDF Reader
2022-11-07 00:00:00
talosblog
talosblog
nessus
nessus
Foxit PhantomPDF < 10.1.10 Multiple Vulnerabilities
2022-12-27 00:00:00
Foxit PDF Reader < 12.0.2 Multiple Vulnerabilities
2022-11-08 00:00:00
Foxit PDF Editor < 11.2.4 Multiple Vulnerabilities
2022-12-23 00:00:00
openvas
openvas
Foxit Reader < 12.0.2 Multiple Vulnerabilities (Jan 2023)
2023-01-30 00:00:00