[{"vendor":"foxitsoftware","product":"foxit_reader","defaultStatus":"unknown","cpes":["cpe:2.3:a:foxitsoftware:foxit_reader:2024.1.0.23997:*:*:*:*:*:*:*"],"versions":[{"version":"2024.1.0.23997","status":"affected"}]}]

{"timestamp":"2024-10-03T15:39:35.815108Z","id":"CVE-2024-28888","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Foxit","product":"Foxit Reader","versions":[{"version":"2024.1.0.23997","status":"affected"}]}]

A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkbox  field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox  field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1967

OR
     *cpe:2.3:a:foxit:pdf_reader:2024.1.0.23997:*:*:*:*:*:*:*

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1967 No Types Assigned

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1967 Exploit, Third Party Advisory

https://www.foxit.com/support/security-bulletins.html No Types Assigned

https://www.foxit.com/support/security-bulletins.html Third Party Advisory

Talos https://www.foxit.com/support/security-bulletins.html [No types assigned]

A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkbox  field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

Talos AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Talos CWE-416

Talos https://talosintelligence.com/vulnerability_reports/TALOS-2024-1967 [No types assigned]