HTTP: Foxit Reader signature field OnBlur event use-after-free vulnerability

This signature detects attempts to exploit a known vulnerability against Foxit reader signature field OnBlur. A successful attack can lead to arbitrary code execution.

Extended Description

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

Affected Products

Foxitsoftware foxit_reader

References

CVE: CVE-2023-38573

Short Name

HTTP:STC:FOXIT-ONBLUR-UAF

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Foxit Reader signature field OnBlur event use-after-free vulnerability

Extended Description

Affected Products

References

Found a potential security threat?