CVE-2023-42097

Summary

CVE-2023-42097 is a remote code execution vulnerability affecting Foxit PDF Reader. This issue is caused by a flaw in the handling of Annotation objects, which allows attackers to execute arbitrary code after freeing memory. User interaction is necessary for exploitation, as the target must visit a malicious page or open a malicious file. The vulnerability was discovered and reported to Foxit as ZDI-CAN-21902.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.