According to its version, the Foxit PDF Reader application (previously named Foxit Reader) installed on the remote Windows host is prior to 11.1. It is, therefore affected by multiple vulnerabilities:

  - Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to     trigger a use-after-free and execute arbitrary code because JavaScript is mishandled. (CVE-2021-41780,     CVE-2021-41781, CVE-2021-41782, CVE-2021-41783, CVE-2021-41784, CVE-2021-41785)

  - Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden     and incremental data in signed documents. An attacker can write to an arbitrary file, and display     controlled contents, during signature verification. (CVE-2021-40326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Foxit PDF Reader < 11.1 Multiple Vulnerabilities

high Nessus Plugin ID 154004

Version 1.10

Version 1.9

Version 1.9

Version 1.8

Version 1.10 Oct 9, 2023, 7:01 PM Detection Plugin Feed: 202310091901
Version 1.9 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.9 Oct 9, 2023, 5:00 PM Detection Plugin Feed: 202310091700
Version 1.8 Dec 13, 2022, 2:03 PM CVSSv2 severity (based on CVE-2021-41785, severity increased from "Medium" to "High") CVSS metrics ("CVSSv2 score" changed from "6.8" to "7.2") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P" to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202212131403