CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

CVE-2017-10951 Foxit Reader Multiple Remote Code Execution Vulnerabilities (Zero Day)

2017年8月29日 2115点热度 0人点赞 0条评论

漏洞类别:Local

漏洞等级:

漏洞信息

Foxit Reader is a multilingual freemium PDF tool that can create, view, edit, digitally sign, and print PDF files.

Foxit Reader is prone to the following vulnerabilities:

A. Foxit Reader launchURL Command Injection Remote Code Execution Vulnerability
B. Foxit Reader saveAs Arbitrary File Write Remote Code Execution Vulnerability

漏洞危害

On successful exploitation it allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader.

解决方案

Solution is not available.
Workaround:

Foxit reader has Safe Reading Mode which is enabled by default to control the running of JavaScript, which can effectively guard against potential vulnerabilities from unauthorized JavaScript action.

0daybank

标签: 暂无
最后更新:2017年8月29日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me