Foxit PDF Reader AcroForm Use-After-Free Info Disclosure
CVE-2024-9252 Published on November 22, 2024

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-24491.

Vendor Advisory NVD

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2024-9252 has been classified to as a Dangling pointer vulnerability or weakness.


Products Associated with CVE-2024-9252

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-9252 are published in these products:

Foxit Pdf Editor
 
Foxit Pdf Reader
 
Foxit Software Foxit Reader
 

Affected Versions

Foxit PDF Reader Version 2024.2.2.25170 is affected by CVE-2024-9252

Exploit Probability

EPSS
0.40%
Percentile
60.56%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.