First published: Fri Feb 11 2022(Updated: )
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Foxit Reader | <=11.1.0.52543 | |
Microsoft Windows Operating System | ||
Foxit Advanced PDF Editor | <=10.1.6.37749 | |
Foxit Advanced PDF Editor | >=11.0.1.0719<=11.2.0.53415 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-24955 has a medium severity rating which indicates potential exploitation risks.
To fix CVE-2022-24955, upgrade to Foxit PDF Reader version 11.2.1 or later and Foxit PDF Editor version 11.2.1 or later.
An Uncontrolled Search Path Element allows attackers to place malicious DLL files in directories that the application may incorrectly trust.
Foxit PDF Reader versions prior to 11.2.1 are affected by CVE-2022-24955.
Foxit PDF Editor versions before 11.2.1, including those in the 10.x and 11.0.x series, are vulnerable.