Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6rrf-jvv2-v2hc

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

EPSS

Процентиль: 17%
0.00054
Низкий

8.8 High

CVSS3

Дефекты

CWE-824

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 месяца назад

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

CVSS3: 8.8
fstec
4 месяца назад

Уязвимость программы для просмотра электронных документов в стандарте PDF Foxit PDF Reader (ранее Foxit Reader), связанная с доступом к неинициализированному указателю, позволяющая нарушителю выполнить произвольный код или повредить память

EPSS

Процентиль: 17%
0.00054
Низкий

8.8 High

CVSS3

Дефекты

CWE-824