What is it?
Multiple security flaws have been reported in the Foxit PDF Reader software that allows cybercriminals who may potentially gain unauthorised access and see sensitive information on systems where Foxit PDF Reader is installed.
In order for the weakness to be used, the person using the software must visit a harmful website or open a harmful file.
Security Flaw – CVE-2022-43639 – There is a problem with the way a software processes U3D files that allows an attacker to run harmful code on the affected system. The issue is caused by the software not checking if an object exists before using it. If an attacker is able to use this weakness, they may be able to run harmful code on the affected system.
Security Flaw – CVE-2022-43640 – There is a problem with the way a software processes PDF files that allows an attacker to run harmful code on the affected system. The issue is caused by data in a PDF file that can cause the software to read past the end of a memory area that has been set aside for it. If an attacker is able to use this weakness along with other weaknesses, they may be able to run harmful code on the affected system.
Who does it apply to?
If you use Foxit PDF Reader
What should you do about it?
- Foxit PDF Reader has fixed this security flaw, Update your Foxit PDF Reader now
https://www.foxit.com/support/security-bulletins.html
- It is always best practice to verify the genuineness of the website before clicking on a link or downloading apps
Sources:
https://www.zerodayinitiative.com/advisories/ZDI-22-1660/
https://www.zerodayinitiative.com/advisories/ZDI-22-1659/
https://www.foxit.com/support/security-bulletins.html
Sign Up to improve your Digital Security Now!