Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2024-17008)

2024-04-0300:00:00

China National Vulnerability Database

www.cnvd.org.cn

foxit pdf reader

cnvd-2024-17008

acroforms

remote code execution

arbitrary code

8.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Foxit PDF Reader is Foxit’s first simplified Chinese version of the PDF document reader. A remote code execution vulnerability exists in Foxit PDF Reader. The vulnerability is related to the handling of AcroForms and is caused by failing to validate an object before performing an operation on it. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process.