certfr_avis - certfr-2025-avi-0824

CERTFR-2025-AVI-0824

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Foxit. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Foxit	PDF Editor	PDF Editor versions 2023.x antérieures à 2023.3.0.63083 pour Mac
Foxit	PDF Editor	PDF Editor versions 2025.x antérieures à 2025.2.0.33046 pour Windows
Foxit	PDF Reader	PDF Reader versions antérieures à 2025.2.0.68868 pour Mac
Foxit	PDF Editor	PDF Editor versions 2023.x antérieures à 2023.3.0.23028 pour Windows
Foxit	PDF Editor	PDF Editor versions antérieures à 14.0.0.68868 pour Mac
Foxit	PDF Editor	PDF Editor versions 2025.x antérieures à 2025.2.0.68868 pour Mac
Foxit	PDF Editor	PDF Editor versions antérieures à 14.0.0.33046 pour Windows
Foxit	PDF Editor	PDF Editor versions 2024.x antérieures à 2024.4.1.27687 pour Windows
Foxit	PDF Reader	PDF Reader versions antérieures à 2025.2.0.33046 pour Windows
Foxit	PDF Editor	PDF Editor versions 2024.x antérieures à 2024.4.1.66479 pour Mac

References

Title

Publication Time

Tags

Bulletin de sécurité FoxIT security-bulletins.php

2025-09-25

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PDF Editor versions 2023.x ant\u00e9rieures \u00e0 2023.3.0.63083 pour Mac",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions 2025.x ant\u00e9rieures \u00e0 2025.2.0.33046 pour Windows",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Reader versions ant\u00e9rieures \u00e0 2025.2.0.68868 pour Mac",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions 2023.x ant\u00e9rieures \u00e0 2023.3.0.23028 pour Windows",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions ant\u00e9rieures \u00e0 14.0.0.68868 pour Mac",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions 2025.x ant\u00e9rieures \u00e0 2025.2.0.68868 pour Mac",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions ant\u00e9rieures \u00e0 14.0.0.33046 pour Windows",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions 2024.x ant\u00e9rieures \u00e0 2024.4.1.27687 pour Windows",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Reader versions ant\u00e9rieures \u00e0 2025.2.0.33046 pour Windows",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "PDF Editor versions 2024.x ant\u00e9rieures \u00e0 2024.4.1.66479 pour Mac",
      "product": {
        "name": "PDF Editor",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-59802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59802"
    },
    {
      "name": "CVE-2025-59803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59803"
    }
  ],
  "initial_release_date": "2025-09-26T00:00:00",
  "last_revision_date": "2025-09-26T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0824",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-09-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Foxit. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits FoxIT",
  "vendor_advisories": [
    {
      "published_at": "2025-09-25",
      "title": "Bulletin de s\u00e9curit\u00e9 FoxIT security-bulletins.php",
      "url": "https://www.foxitsoftware.com/support/security-bulletins.php"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted