CVE-2024-30322

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader (affected versions not specified) Foxit PDF Editor (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the AcroForm Handler component when handling Doc objects. This can allow an attacker to execute arbitrary code by providing a specially crafted file or web page, requiring user interaction such as visiting a malicious page or opening a malicious file. The flaw exists due to the lack of validation of an object's existence before performing operations on it.

Recommendations For Foxit PDF Reader, update to a version that fixes the use-after-free vulnerability in the AcroForm Handler component. For Foxit PDF Editor, update to a version that fixes the use-after-free vulnerability in the AcroForm Handler component. As a temporary workaround, consider restricting the handling of AcroForms in both Foxit PDF Reader and Foxit PDF Editor until a patch is available.