Test ID:	1.3.6.1.4.1.25623.1.0.834087
Category:	General
Title:	Foxit Reader Multiple Vulnerabilities (June-4 2024)
Summary:	Foxit Reader is prone to multiple; vulnerabilities.
Description:	Summary: Foxit Reader is prone to multiple vulnerabilities. Vulnerability Insight: These vulnerabilities exist: - CVE-2023-39542: A remote code execution vulnerability when handling certain JavaScripts. - CVE-2023-42089: An use-after-free vulnerability and crash when handling certain JavaScripts. Vulnerability Impact: Successful exploitation allows an attacker to execute remote code and disclose information. Affected Software/OS: Foxit Reader version 12.1.3.15356 and prior on Windows. Solution: Update to version 2023.2 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-42089 ZDI-23-1422 https://www.zerodayinitiative.com/advisories/ZDI-23-1422/ vendor-provided URL https://www.foxit.com/support/security-bulletins.html Common Vulnerability Exposure (CVE) ID: CVE-2023-42090 ZDI-23-1423 https://www.zerodayinitiative.com/advisories/ZDI-23-1423/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42091 ZDI-23-1424 https://www.zerodayinitiative.com/advisories/ZDI-23-1424/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42092 ZDI-23-1425 https://www.zerodayinitiative.com/advisories/ZDI-23-1425/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42093 ZDI-23-1426 https://www.zerodayinitiative.com/advisories/ZDI-23-1426/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42094 ZDI-23-1427 https://www.zerodayinitiative.com/advisories/ZDI-23-1427/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42095 ZDI-23-1428 https://www.zerodayinitiative.com/advisories/ZDI-23-1428/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42096 ZDI-23-1429 https://www.zerodayinitiative.com/advisories/ZDI-23-1429/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42097 ZDI-23-1430 https://www.zerodayinitiative.com/advisories/ZDI-23-1430/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42098 ZDI-23-1431 https://www.zerodayinitiative.com/advisories/ZDI-23-1431/ Common Vulnerability Exposure (CVE) ID: CVE-2023-39542 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1832
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.