跳转到帖子

Foxit Reader: Unspecified Security Vulnerability (CVE-2024-28888)

recommended_posts

发布于
  • Members

Foxit Reader: Unspecified Security Vulnerability (CVE-2024-28888)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
10/02/2024
Created
10/12/2024
Added
10/11/2024
Modified
01/28/2025

Description

A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkboxfield object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

Solution(s)

  • foxit-reader-upgrade-latest

References

  • https://attackerkb.com/topics/cve-2024-28888
  • CVE - 2024-28888
  • https://talosintelligence.com/vulnerability_reports/TALOS-2024-1967
  • https://www.foxit.com/support/security-bulletins.html
  • https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1967
  • 查看数 710
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…