CVE-2020-14425: High severity foxit reader vulnerability
Published Nov 2, 2020
·Updated
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.
Affected Software
1 affected component
Foxitsoftware Foxit Reader>=9.7.1<10.0.0
Event History
Nov 2, 2020
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
Description
Frequently Asked Questions
1
What is CVE-2020-14425?
CVE-2020-14425 is a vulnerability that allows remote command execution in Foxit Reader before 10.0.
2
How does CVE-2020-14425 work?
CVE-2020-14425 works by exploiting the app.opencPDFWebPage JavsScript API in Foxit Reader, allowing an attacker to execute local files and bypass the security dialog.
3
What is the severity of CVE-2020-14425?
CVE-2020-14425 has a severity rating of 7.8 (high).
4
Which version of Foxit Reader is affected by CVE-2020-14425?
Foxit Reader versions 9.7.1 to 10.0 are affected by CVE-2020-14425.
5
How can I fix CVE-2020-14425?
To fix CVE-2020-14425, update your Foxit Reader to version 10.0 or later.