The following SNORTⓇ rules will detect exploitation attempts against this vulnerability: 5740. Talos tested and confirmed this version of the PDF Reader could be exploited by this vulnerability. Users are encouraged to update Foxit Reader 10.8 as soon as possible. The vulnerability specifically exists in the way Foxit PDF Reader handles certain annotation types.Ĭisco Talos worked with Foxit to ensure that that this issue is resolved and an update is available for affected customers, all in adherence to Cisco’s vulnerability disclosure policy. An attacker needs to trick a user into opening a specially crafted, malicious PDF to exploit this vulnerability.

TALOS-2021-1287 (CVE-2020-28588) is a use-after-free vulnerability that exists in the PDF Reader that could lead to an adversary gaining the ability to execute arbitrary code on the victim machine. As a complete and feature-rich PDF reader, it supports JavaScript for interactive documents and dynamic forms. Blog by Jon Munshaw.Ĭisco Talos recently discovered a use-after-free vulnerability in the Foxit PDF Reader.įoxit PDF Reader is one of the most popular PDF document readers currently available. Aleksandar Nikolic of Cisco Talos discovered this vulnerability.

Foxit pdf reader free