Foxit Reader up to 7.3.3 on Windows Revision Number PDF Document use after free
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.5 | $0-$5k | 0.00 |
A vulnerability has been found in Foxit Reader up to 7.3.3 on Windows (Document Reader Software) and classified as critical. This vulnerability affects an unknown code of the component Revision Number Handler. The manipulation with the input value -1
leads to a use after free vulnerability. The CWE definition for the vulnerability is CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.
The weakness was released 04/22/2016 by AbdulAziz Hariri with Zero Day Initiative (Website). The advisory is available at securityfocus.com. This vulnerability was named CVE-2016-4063 since 04/22/2016. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit.
The vulnerability scanner Nessus provides a plugin with the ID 90567 (Foxit Reader < 7.3.4 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows and running in the context l.
Upgrading to version 7.3.4 eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at Tenable (90567). Entries connected to this vulnerability are available at 82782, 82783, 82784 and 82785.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.8VulDB Meta Temp Score: 7.6
VulDB Base Score: 7.8
VulDB Temp Score: 7.5
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 7.8
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Use after freeCWE: CWE-416 / CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 90567
Nessus Name: Foxit Reader < 7.3.4 Multiple Vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 801754
OpenVAS Name: Foxit PhantomPDF Multiple Remote Code Execution Vulnerabilities
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: Reader 7.3.4
Timeline
03/15/2016 🔍03/23/2016 🔍
04/18/2016 🔍
04/22/2016 🔍
04/22/2016 🔍
04/22/2016 🔍
04/24/2016 🔍
10/21/2018 🔍
Sources
Vendor: foxitsoftware.comAdvisory: securityfocus.com⛔
Researcher: AbdulAziz Hariri
Organization: Zero Day Initiative
Status: Not defined
Confirmation: 🔍
CVE: CVE-2016-4063 (🔍)
SecurityFocus: 85379 - Foxit Reader and Foxit PhantomPDF Use-After-Free Multiple Remote Code Execution Vulnerabilities
See also: 🔍
Entry
Created: 04/24/2016 09:13Updated: 10/21/2018 09:58
Changes: 04/24/2016 09:13 (57), 10/21/2018 09:58 (24)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.