CVE-2021-21870
05.08.2021, 21:15
A use-after-free vulnerability exists in the JavaScript engine of Foxit Softwares PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a malicious file or site to trigger this vulnerability if the browser plugin extension is enabled.Enginsight
Vendor | Product | Version |
---|---|---|
foxit | pdf_reader | 10.1.4.37651 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration