Lucene search

K
zdiDoHyun Lee(@l33d0hyun)ZDI-22-1049
HistoryAug 05, 2022 - 12:00 a.m.

Foxit PDF Editor JavaScript Optimization Type Confusion Remote Code Execution Vulnerability

2022-08-0500:00:00
DoHyun Lee(@l33d0hyun)
www.zerodayinitiative.com
15
vulnerability
remote code execution
foxit pdf editor
javascript optimization
type confusion
user interaction

0.015 Low

EPSS

Percentile

86.9%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaScript optimizations. The issue results from an improper optimization, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process.

0.015 Low

EPSS

Percentile

86.9%