CVE-2024-12751
CVSS 3.0 Score 7.8 of 10 (high)
Details
Published Dec 30, 2024
CWE ID 125
Summary
CVE-2024-12751 is a remote code execution vulnerability affecting Foxit PDF Reader. This issue is linked to the improper handling of AcroForms, leading to an out-of-bounds read. Attackers can exploit this vulnerability by crafting a malicious page or file, requiring user interaction for successful exploitation. The flaw arises from insufficient validation of user-supplied data, enabling adversaries to read past the end of an allocated buffer and execute arbitrary code in the context of the current process. (ZDI-CAN-25344)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Foxit Software Inc.