CVE-2020-27860

12.02.2021, 00:15

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11727.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
zdi	CNA	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 88%

Vendor	Product	Version
foxitsoftware	foxit_reader	𝑥 ≤ 10.1.0.37527
foxitsoftware	phantompdf	𝑥 ≤ 9.7.4.29600
foxitsoftware	phantompdf	10.0.0.0 ≤ 𝑥 ≤ 10.1.0.37527

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

References

https://www.foxitsoftware.com/support/security-bulletins.html

https://www.zerodayinitiative.com/advisories/ZDI-20-1415/

https://www.foxitsoftware.com/support/security-bulletins.html

https://www.zerodayinitiative.com/advisories/ZDI-20-1415/