CVE-2023-27330

EUVD-2023-31106
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19476.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
foxitpdf_editor
𝑥
< 10.1.10.37854
foxitpdf_editor
11.0.0.49893 ≤
𝑥
< 11.2.4.53774
foxitpdf_editor
12.0.0.12394 ≤
𝑥
< 12.1.0.15250
foxitpdf_reader
𝑥
< 12.1.0.15250
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
foxitpdf_reader
𝑥
≤ 10.1.10.37854
ADP
foxitpdf_reader
11 ≤
𝑥
≤ 11.2.4.53774
ADP
foxitpdf_reader
12 ≤
𝑥
≤ 12.1.0.15250
ADP
Common Weakness Enumeration
References
https://www.foxit.com/support/security-bulletins.html
https://www.zerodayinitiative.com/advisories/ZDI-23-226/
https://www.foxit.com/support/security-bulletins.html
https://www.zerodayinitiative.com/advisories/ZDI-23-226/