SecuritySpace - CVE-2022-22150

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2022-22150

Description: A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-22150
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439

CVE ID:	CVE-2022-22150
Description:	A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-22150 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439