CVE-2021-41781: Use After Free
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-41781.
What is the severity of this vulnerability?
The severity of this vulnerability is high (7.8).
Which software versions are affected by this vulnerability?
Foxit PDF Reader versions before 11.1, Foxit PDF Editor versions before 11.1, and Foxit PhantomPDF versions before 10.1.6 are affected by this vulnerability.
How does this vulnerability work?
This vulnerability allows attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Is Microsoft Windows affected by this vulnerability?
No, Microsoft Windows is not affected by this vulnerability.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the official security bulletins released by Foxit at: [https://www.foxit.com/support/security-bulletins.html]