CVE-2023-40194
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-40194 is an arbitrary file creation vulnerability in Foxit Reader 12.1.3.15356's Javascript exportDataObject API, affecting the product Foxit Reader version 12.1.3.15356. This vulnerability occurs due to the mishandling of whitespace characters and can allow a specially crafted malicious file to create files at arbitrary locations, potentially leading to arbitrary code execution. The user needs to be tricked into opening the malicious file for the vulnerability to be triggered. Additionally, exploitation is possible if a user visits a specially crafted, malicious site with the browser plugin extension enabled. The vulnerability has a high base severity score of 8.8 and poses a potential risk to an organization's confidentiality and integrity, with an impact score of 5.9 out of 10. Note: The information provided is purely fictional and does not represent any real-world vulnerability or product.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions