Foxit PhantomPDF WillClose: Reuse Remote Code Execution Vulnerability after release

Foxit PhantomPDF WillClose: Reuse Remote Code Execution Vulnerability after release

Affected Systems:

Foxit Reader

Description:

Foxit Reader is a small PDF document viewer and print program.

Foxit Reader's WillClose operation has a security vulnerability. When you execute the WillClose operation on the constructed PDF file, the pointer is forcibly suspended and released for reuse. Attackers can exploit this vulnerability to execute arbitrary code in the context of the current process.

<* Source: AbdulAziz harsiri
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.foxitsoftware.com/support/security-bulletins.php