CVE-2020-13547: High severity foxit reader vulnerability

Published Dec 22, 2020

Updated

A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Affected Software

1 affected component

Foxitsoftware Foxit Reader=10.0.0.37527

Event History

Dec 22, 2020

CVE Published

via MITRE·06:59 PM

Data Sourced

via MITRE·06:59 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-13547?

CVE-2020-13547 is a type confusion vulnerability in the JavaScript engine of Foxit Software's Foxit PDF Reader version 10.1.0.37527.

How does CVE-2020-13547 affect Foxit PDF Reader?

CVE-2020-13547 can allow an attacker to execute arbitrary code by tricking the user into opening a specially crafted PDF document.

What is the severity of CVE-2020-13547?

CVE-2020-13547 has a severity rating of 8.8 (High).

How can I fix CVE-2020-13547?

To fix CVE-2020-13547, users should update their Foxit PDF Reader to a version that has addressed this vulnerability.

Where can I find more information about CVE-2020-13547?

More information about CVE-2020-13547 can be found at the following reference link: [https://talosintelligence.com/vulnerability_reports/TALOS-2020-1165](https://talosintelligence.com/vulnerability_reports/TALOS-2020-1165)