Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17417

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17417

CVE-2020-17417 affects Foxit Reader (10.0.1.35811 and earlier) and related Foxit products. The root cause is a failure to verify the existence of an Annotation object before performing operations on it, leading to use-after-free/invalid object handling in Annotation processing. This can enable re...