CVE-2023-32664: High severity foxit reader vulnerability

Published Jul 19, 2023

Updated

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. A specially-crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. User would need to open a malicious file to trigger the vulnerability.

Other sources

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. User would need to open a malicious file to trigger the vulnerability.

Affected Software

1 affected component

Foxit PDF Reader=12.1.2.15332

Event History

Jul 19, 2023

CVE Published

via MITRE·01:16 PM

Data Sourced

via MITRE·01:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID is CVE-2023-32664.

What is the severity of CVE-2023-32664?

The severity of CVE-2023-32664 is high.

Which software is affected by CVE-2023-32664?

Foxit PDF Reader version 12.1.2.15332 is affected by CVE-2023-32664.

How can this vulnerability be exploited?

A specially-crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution when opened by the user.

Is there a fix available for CVE-2023-32664?

Yes, upgrading to a version of Foxit PDF Reader that is not affected by CVE-2023-32664 will fix the vulnerability.