CVE-2022-37377: fallo de gravedad alta en Foxit PDF Editor
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 1.0%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaScript optimizations. The issue results from an improper optimization, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16733.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Foxit · PDF EditorCVEs relacionadas — Foxit PDF Editor
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-37378HIGHCVE-2022-37378EPSS 1.0%CVE-2022-37376LOWCVE-2022-37376EPSS 0.8%CVE-2023-27365HIGHFoxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-27364HIGHFoxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution VulnerabilityEPSS 0.5%CVE-2021-34968HIGHFoxit PDF Editor transitionToState Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2021-34967HIGHFoxit PDF Editor Line Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%