certfr_avis - certfr-2023-avi-0731

CERTFR-2023-AVI-0731

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Foxit PDF Reader et Editor. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Foxit	PDF Reader	Foxit PDF Reader (anciennement Foxit Reader) versions 12.1.x antérieures à 2023.2
Foxit	PDF Reader	Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 11.x antérieures à 2023.2
Foxit	PDF Reader	Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 12.x antérieures à 2023.2
Foxit	PDF Reader	Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 10.1.x antérieures à 2023.2
Foxit	PDF Reader	Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 2023.1.0.x antérieures à 2023.2

References

Title

Publication Time

Tags

Bulletin de sécurité Foxit du 12 septembre 2023

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Foxit PDF Reader (anciennement Foxit Reader) versions 12.1.x ant\u00e9rieures \u00e0 2023.2",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 11.x ant\u00e9rieures \u00e0 2023.2",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 12.x ant\u00e9rieures \u00e0 2023.2",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 10.1.x ant\u00e9rieures \u00e0 2023.2",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "Foxit PDF Editor (anciennement Foxit PhantomPDF) versions 2023.1.0.x ant\u00e9rieures \u00e0 2023.2",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-39542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39542"
    }
  ],
  "initial_release_date": "2023-09-12T00:00:00",
  "last_revision_date": "2023-09-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0731",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-09-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Foxit PDF Reader et\nEditor. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Foxit PDF Reader et Editor",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Foxit du 12 septembre 2023",
      "url": "https://www.foxit.com/support/security-bulletins.html"
    }
  ]
}

CVE-2023-39542 (GCVE-0-2023-39542)

Vulnerability from cvelistv5

Published

2023-11-27 15:25

Modified

2025-11-04 19:17

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-73 - External Control of File Name or Path

Summary

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

References

URL

Tags

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832

Impacted products

	Vendor	Product	Version
	Foxit	Foxit Reader	Version: 12.1.3.15356

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:17:44.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832",
            "tags": [
              "x_transferred"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832"
          },
          {
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1832"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Foxit Reader",
          "vendor": "Foxit",
          "versions": [
            {
              "status": "affected",
              "version": "12.1.3.15356"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Discovered by Kamlapati Choubey of Cisco Talos."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-27T18:00:06.438Z",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832",
          "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2023-39542",
    "datePublished": "2023-11-27T15:25:12.044Z",
    "dateReserved": "2023-08-14T16:46:48.485Z",
    "dateUpdated": "2025-11-04T19:17:44.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2023-AVI-0731

Vulnerability from certfr_avis

Solution

CVE-2023-39542 (GCVE-0-2023-39542)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature