CVE-2020-13547
First published: Tue Dec 22 2020(Updated: )
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Foxitsoftware Foxit Reader | =10.0.0.37527 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-13547?
CVE-2020-13547 is a type confusion vulnerability in the JavaScript engine of Foxit Software's Foxit PDF Reader version 10.1.0.37527.
How does CVE-2020-13547 affect Foxit PDF Reader?
CVE-2020-13547 can allow an attacker to execute arbitrary code by tricking the user into opening a specially crafted PDF document.
What is the severity of CVE-2020-13547?
CVE-2020-13547 has a severity rating of 8.8 (High).
How can I fix CVE-2020-13547?
To fix CVE-2020-13547, users should update their Foxit PDF Reader to a version that has addressed this vulnerability.
Where can I find more information about CVE-2020-13547?
More information about CVE-2020-13547 can be found at the following reference link: [https://talosintelligence.com/vulnerability_reports/TALOS-2020-1165](https://talosintelligence.com/vulnerability_reports/TALOS-2020-1165)
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/foxitsoftware
- canonical/foxitsoftware foxit reader
- version/foxitsoftware foxit reader/10.0.0.37527