CVE-2024-25648
high · 8.8A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
8.8
CVSS
15.6%
EPSS (exploit prob.)
97th
EPSS percentile
2024-04-30
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| foxit | pdf_editor | <= 11.2.8.53842 |
| foxit | pdf_editor | >= 12.0.0.12394, <= 12.1.4.15400 |
| foxit | pdf_editor | >= 13.0.0.21632, <= 13.0.1.21693 |
| foxit | pdf_editor | >= 2023.1.0.15510, <= 2023.3.0.23028 |
| foxit | pdf_editor | 2024.1.0.23997 |
| foxit | pdf_reader | 2024.1.0.23997 |
| microsoft | windows | all versions |
| foxit | pdf_editor | <= 11.1.6.0109 |
| foxit | pdf_editor | >= 12.0.0.0601, <= 12.1.2.55366 |
| foxit | pdf_editor | >= 13.0.0.61829, <= 13.0.1.61866 |
| foxit | pdf_editor | >= 2023.1.0.55583, <= 2023.3.0.63083 |
| foxit | pdf_editor | 2024.1.0.63682 |
| foxit | pdf_reader | 2024.1.0.63682 |
| apple | macos | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2024-25648