According to its version, the Foxit PDF Reader application (previously named Foxit Reader) installed on the remote Windows host is prior to 2024.3. It is, therefore affected by multiple vulnerabilities:

  - In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can     replace an update file with a Trojan horse via side loading, because the update service lacks integrity     validation for the updater. Attacker-controlled code may thus be executed. (CVE-2024-41605)

  - Addressed potential issues where the application could be exposed to a Use-After-Free vulnerability and     crash when handling certain checkbox field objects, Annotation objects, or AcroForms, which attackers     could exploit to execute remote code. This occurs as the application uses a wild pointer or an object that     has been freed without proper validation, or fails to properly synchronize the annotation items when     handling the Reply Note of an annotation using JavaScript. (CVE-2024-28888, CVE-2024-7725, CVE-2024-9243,     CVE-2024-9254) (CVE-2024-28888)

  - Addressed potential issues where the application could be exposed to a Privilege Escalation vulnerability     when performing an update or installing a plugin, which attackers could exploit to delete arbitrary files     or execute arbitrary code so as to carry out privilege escalation attacks. This occurs due to the     incorrect permission assignment on the resources used by the update service, improper signature validation     and incomplete certificate check for the updater, weak randomness setting for the name of the temporary     folder during a plugin installation, or improper DLL loading without using the built-in manifest file.
    (CVE-2024-9245, CVE-2024-9244, CVE-2024-38393) (CVE-2024-38393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Foxit PDF Reader < 2024.3 Multiple Vulnerabilities

high Nessus Plugin ID 207795

Version 1.4