Tracker / CVE-2022-37377
CVE-2022-37377
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaScript optimizations. The issue results from an improper optimization, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16733.
Affected products and versions
| foxit | pdf_editor |
|---|---|
| foxit | pdf_editor · … → 10.1.9 |
| foxit | pdf_editor · 11.0.0 → 11.2.3 |
| foxit | pdf_reader · … → 12.0.1 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.