CVE-2021-31454
Summary
| CVE | CVE-2021-31454 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-05-07 21:15:00 UTC |
|---|
| Updated | 2021-05-11 17:01:00 UTC |
|---|
| Description | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Decimal element. A crafted leadDigits value in a Decimal element can trigger an overflow of a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-13095. |
|---|
NVD Known Affected Configurations (CPE 2.3)
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 375563 Foxit Reader and Foxit PhantomPDF Multiple Vulnerabilities
- 375946 Foxit Reader and Foxit PhantomPDF Multiple Vulnerabilities
