CVE-2022-24955: Critical severity foxit reader vulnerability
Published Feb 11, 2022
·Updated
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
Affected Software
4 affected components
Foxit PDF Reader<=11.1.0.52543
Microsoft Windows
Foxit PDF Editor<=10.1.6.37749
Foxit PDF Editor>=11.0.1.0719<=11.2.0.53415
Remediation
Patch Available
Event History
Feb 11, 2022
CVE Published
via MITRE·01:40 AM
Data Sourced
via MITRE·01:40 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-24955?
CVE-2022-24955 has a medium severity rating which indicates potential exploitation risks.
2
How do I fix CVE-2022-24955?
To fix CVE-2022-24955, upgrade to Foxit PDF Reader version 11.2.1 or later and Foxit PDF Editor version 11.2.1 or later.
3
What is an Uncontrolled Search Path Element in CVE-2022-24955?
An Uncontrolled Search Path Element allows attackers to place malicious DLL files in directories that the application may incorrectly trust.
4
Which versions of Foxit PDF Reader are affected by CVE-2022-24955?
Foxit PDF Reader versions prior to 11.2.1 are affected by CVE-2022-24955.
5
Which versions of Foxit PDF Editor are vulnerable according to CVE-2022-24955?
Foxit PDF Editor versions before 11.2.1, including those in the 10.x and 11.0.x series, are vulnerable.