Reuse Remote Code Execution Vulnerability after Foxit Reader revision code is released

Reuse Remote Code Execution Vulnerability after Foxit Reader revision code is released
Reuse Remote Code Execution Vulnerability after Foxit Reader revision code is released

Release date:
Updated on:

Affected Systems:

Foxit Reader <= 7.3.0.118
Foxit Phantom PDF <= 7.3.0.118

Description:

CVE (CAN) ID:

Foxit Reader is a small PDF document viewer and print program.

Foxit Reader has a security vulnerability in dealing with object revision numbers, which can be released and reused by hanging pointers. attackers can execute arbitrary code in the context of the current process.

<* Source: Mario Gomes
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.foxitsoftware.com/support/security-bulletins.php

This article permanently updates the link address: