Improper authorization in handler for custom URL scheme in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - #VU101822

Vulnerability identifier: #VU101822

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-939

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error when handling XFA documents. A remote attacker can trick the victim into opening a specially crafted PDF document and compromise the affected system.

Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Foxit PDF Reader for Mac
Foxit PDF Editor for Mac (formerly PhantomPDF)

Install updates from vendor's website.

Foxit PDF Editor (formerly Foxit PhantomPDF) - addressed in versions 11.2.12.54161, 12.1.9.15762, 13.1.5.23566, 2024.4.0.27683
Foxit PDF Reader for Windows - update to 2024.4.0.27683
Foxit PDF Reader for Mac - update to 2024.4.0
Foxit PDF Editor for Mac (formerly PhantomPDF) - addressed in versions 11.1.11.1202, 12.1.7.55606, 13.1.5.63001, 2024.4.0.66473

• https://www.foxitsoftware.com/support/security-bulletins.html?Security+updates+available+in+Foxit+PDF+Reader+2024.4+and+Foxit+PDF+Editor+2024.4%2F13.1.52024-12-17+00%3A00%3A00

• Multiple vulnerabilities in Foxit PDF Reader and Editor for Windows
• Multiple vulnerabilities in Foxit PDF Reader and Editor for Mac