CVE-2017-10951— Foxit Reader 安全漏洞

N/A

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within app.launchURL method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4724.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Foxit Reader 安全漏洞

Foxit Reader是中国福昕（Foxit）软件公司的一款PDF文档阅读器。 Foxit Reader 8.2.0.2051版本中的app.launchURL方法存在安全漏洞，该漏洞源于程序在执行系统调用之前，没有充分的验证用户提交的字符串。远程攻击者可借助恶意的页面或文件利用该漏洞在当前进程中执行任意代码。

N/A

N/A