CVE-2024-12752

Summary

CVE-2024-12752 is a remote code execution vulnerability affecting Foxit PDF Reader. This issue is related to the improper handling of AcroForms, which can lead to memory corruption. Attackers can exploit this vulnerability by crafting malicious pages or files, requiring user interaction for successful exploitation. The lack of proper validation of user-supplied data enables an attacker to execute arbitrary code in the context of the current process. This vulnerability, identified as ZDI-CAN-25345, poses a significant risk to affected installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.