CVE-2017-14827: Incorrect Type Cast
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the append method of XFA Node objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5019.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14827?
CVE-2017-14827 is rated as critical due to the potential for remote code execution.
How do I fix CVE-2017-14827?
To mitigate CVE-2017-14827, users should update Foxit Reader to the latest version released by Foxit Software.
What versions of Foxit Reader are affected by CVE-2017-14827?
CVE-2017-14827 affects Foxit Reader version 8.3.1.21155.
Can CVE-2017-14827 be exploited without user interaction?
Exploitation of CVE-2017-14827 requires user interaction, such as visiting a malicious webpage or opening a harmful file.
What type of vulnerability is CVE-2017-14827 classified as?
CVE-2017-14827 is classified as a remote code execution vulnerability.