Input validation error in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - CVE-2023-39542
Published: September 11, 2023 / Updated: November 27, 2023
Vulnerability identifier: #VU80631
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-39542
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to insufficient validation of user-supplied input when handling the cPath parameter in the saveAs method. A remote attacker can pass trick the victim into saving a specially crafted PDF file and force the application to save a file with ".hta" extension into the Startup folder, which can result into remote code execution after the system is restarted.
Affected software
Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Foxit PDF Reader for Windows
How to mitigate CVE-2023-39542
Install updates from vendor's website.
Foxit PDF Editor (formerly Foxit PhantomPDF) - addressed in versions 2023.2.0.21408, 11.2.8.53842, 12.1.4.15400
Foxit PDF Reader for Windows - update to 2023.2.0.21408
Foxit PDF Reader for Windows - update to 2023.2.0.21408