CVE-2020-14425

概要

参考情報

• packetstormsecurity.com/files/159784/Foxit-Reader-9.7.1-Remote-Command-Execution.html · Exploit
• exploit-db.com/exploits/48982 · Exploit
• foxitsoftware.com/support/security-bulletins.php · Vendor Advisory

foxit reader のその他の脆弱性

• CVE-2023-41257高 8.8A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript c…
• CVE-2023-40194高 8.8An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of w…
• CVE-2023-39542高 8.8A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can crea…
• CVE-2023-38573高 8.8A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code in…
• CVE-2023-35985高 8.8An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to prop…