| Package | Affected versions | Patched versions |
|---|---|---|
| foxit pdf sdk activex | ≤ 5.5.0 |
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free