Description (CNA)
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. User would need to open a malicious file to trigger the vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Foxit / Foxit Reader | affected 12.1.2.15332 |
CWE
CWE-843
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.