CVE-2023-32664

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jul 19, 2023
Updated: Sep 15, 2023
CWE ID 843

Summary

CVE-2023-32664 is a type confusion vulnerability affecting the Javascript checkThisBox method in Foxit Reader 12.1.2.15332. Maliciously crafted JavaScript code within a malicious PDF document can exploit this flaw, resulting in memory corruption and enabling remote code execution. Triggering this vulnerability requires users to open a malicious file.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share