HIGH🇬🇧 English

CVE-2024-25858

CVSS 8.4v3.1pub. 2024-03-05upd. 2025-05-23

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Foxit Pdf Editor

    APP
    Foxit
    < 2024.4

  • Foxit Pdf Reader

    APP
    Foxit
    < 2024.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2022-28104CRITICAL9.8ten sam produkt

Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.

CVE-2022-24954CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related t...

CVE-2022-24955CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for...

CVE-2021-38563CRITICAL9.8ten sam produkt

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situatio...

CVE-2026-5940HIGH7.8ten sam produkt

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated o...