CVE-2022-24369

18.02.2022, 20:15

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16087.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
zdi	CNA	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 70%

Vendor	Product	Version
foxit	pdf_editor	𝑥 ≤ 10.1.6.37749
foxit	pdf_editor	11.0.0.49893 ≤ 𝑥 ≤ 11.2.0.53415
foxit	pdf_reader	𝑥 ≤ 11.1.0.52543

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

References

https://www.foxit.com/support/security-bulletins.html

https://www.zerodayinitiative.com/advisories/ZDI-22-280/

https://www.foxit.com/support/security-bulletins.html

https://www.zerodayinitiative.com/advisories/ZDI-22-280/