Логотип exploitDog
bind:CVE-2024-9252
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-9252

Количество 3

Количество 3

nvd логотип

CVE-2024-9252

около 1 года назад

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24491.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-c2q4-8p6c-4c38

около 1 года назад

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24491.

CVSS3: 3.3
EPSS: Низкий
fstec логотип

BDU:2024-07905

больше 1 года назад

Уязвимость обработчика AcroForms программы для просмотра электронных документов в стандарте PDF Foxit PDF Reader (ранее Foxit Reader), позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 3.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-9252

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24491.

CVSS3: 7.8
0%
Низкий
около 1 года назад
github логотип
GHSA-c2q4-8p6c-4c38

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24491.

CVSS3: 3.3
0%
Низкий
около 1 года назад
fstec логотип
BDU:2024-07905

Уязвимость обработчика AcroForms программы для просмотра электронных документов в стандарте PDF Foxit PDF Reader (ранее Foxit Reader), позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 3.3
0%
Низкий
больше 1 года назад

Уязвимостей на страницу