Foxit Reader Multiple Vulnerabilities

Last Update Date: 23 Apr 2018 09:26 Release Date: 23 Apr 2018 4797 Views

RISK: Medium Risk

TYPE: Clients - Productivity Products

Multiple vulnerabilities were reported in Foxit Reader. A remote user can cause arbitrary code to be executed, denial of service conditions, and obtain potentially sensitive information on the target system.

Impact

Denial of Service
Remote Code Execution
Information Disclosure

System / Technologies affected

Versions 9.0.1.1049 and prior

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (9.1).
https://www.foxitsoftware.com/support/security-bulletins.php#content-2018

Vulnerability Identifier

CVE-2017-14458
CVE-2017-17557
CVE-2018-3842
CVE-2018-3843
CVE-2018-3850
CVE-2018-3853

Source

SecurityTracker