CVE-2024-9254

Summary

CVE-2024-9254 is a Remote Code Execution vulnerability affecting Foxit PDF Reader. This issue arises due to an inadequate validation check in the handling of Annotation objects. An attacker can trigger this weakness by crafting a malicious PDF file or directing a user to a malicious webpage. Once exploited, the vulnerability allows the attacker to execute arbitrary code on the affected system in the context of the current process. The vulnerability, identified as ZDI-CAN-25173, poses a significant risk to users of Foxit PDF Reader who may encounter malicious PDF files or webpages.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.