SecuritySpace - CVE-2023-33876

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2023-33876

Description: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-33876
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1796
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1796

CVE ID:	CVE-2023-33876
Description:	A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2023-33876 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1796 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1796