CVSS 7.8 · High EPSS 0,17%
Kerentanan Use After Free pada foxit pdf editor, foxit pdf reader. Skor CVSS 3.1 7.8 (High) menurut NVD.
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| foxit | pdf editor | Semua versi hingga 13.2.2.24014 |
| foxit | pdf editor | Versi 14.0.0.33046 hingga 14.0.2.33402 |
| foxit | pdf editor | Versi 2023.1.0.15510 hingga 2023.3.0.23028 |
| foxit | pdf editor | Versi 2024.1.0.23997 hingga 2024.4.1.27687 |
| foxit | pdf editor | Versi 2025.1.0.27937 hingga 2025.3.0.35737 |
| foxit | pdf reader | Semua versi hingga 2025.3.0.35737 |
| foxit | pdf editor | Semua versi hingga 13.2.2.63349 |
| foxit | pdf editor | Versi 14.0.0.68868 hingga 14.0.2.69164 |
| foxit | pdf editor | Versi 2023.1.0.55583 hingga 2023.3.0.63083 |
| foxit | pdf editor | Versi 2024.1.0.63682 hingga 2024.4.1.66479 |
| foxit | pdf editor | Versi 2025.1.0.66692 hingga 2025.3.0.69570 |
| foxit | pdf reader | Semua versi hingga 2025.3.0.69570 |