CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw…

published February 11, 2022

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack-based buffer overflow lurks in Foxit PDF Reader and Editor versions before 11.2.1! This vulnerability may not be on everyone's radar, but it's definitely worth your attention! 🔍 Think of it like a tight squeeze in a busy restaurant. If a waiter tries to carry too many dishes at once, the stack can overflow, causing a chaotic scene where dishes drop everywhere! Similarly, this overflow issue could lead to unintended behavior in the software. With this vulnerability, an attacker could potentially cause the application to crash or execute arbitrary code. While this might not lead to a catastrophic breach, it's certainly a hassle and could compromise your PDFs in unexpected ways.

Put simply

Think of it like a tight squeeze in a busy restaurant. If a waiter tries to carry too many dishes at once, the stack can overflow, causing a chaotic scene where dishes drop everywhere! Similarly, this overflow issue could lead to unintended behavior in the software. This vulnerability arises from a stack-based buffer overflow related to specific XFA substrings in Foxit PDF Reader and Editor. If exploited, it could allow attackers to manipulate the program's execution flow.

What to do

With this vulnerability, an attacker could potentially cause the application to crash or execute arbitrary code. While this might not lead to a catastrophic breach, it's certainly a hassle and could compromise your PDFs in unexpected ways. To protect yourself, update Foxit PDF Reader and Editor to version 11.2.1 or later immediately. Additionally, review your PDF handling practices to minimize exposure to potentially malicious files. Stay alert! You've got this! Follow these steps, and you'll be the hero defending your digital realm! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11926 · 96.1th percentile
Published
2022-02-11T01:40Z
EPSS history
Timeline
  • 11 FEB 01:40Z
    Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw…
    cvelistv5