Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-27363— Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

EPSS 81.01% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-27363

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportXFAData method. The application exposes a JavaScript interface that allows writing arbitrary files. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-19697.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
暴露危险的方法或函数
Source: NVD (National Vulnerability Database)
Vulnerability Title
Foxit PDF Reader 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Foxit PDF Reader是中国福昕（Foxit）公司的一款PDF阅读器。 Foxit PDF Reader 存在安全漏洞，该漏洞源于 exportXFAData 暴露危险方法远程代码执行漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
FoxitPDF Reader 12.1.0.15250 -

II. Public POCs for CVE-2023-27363

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/qwqdanchun/CVE-2023-27363POC Details
2福昕Foxit PDF远程代码执行漏洞CVE-2023-27363分析与复现https://github.com/webraybtl/CVE-2023-27363POC Details
3福昕Foxit PDF远程代码执行漏洞(CVE-2023-27363)https://github.com/CN016/-Foxit-PDF-CVE-2023-27363-POC Details
4Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/%E5%85%B6%E4%BB%96%E6%BC%8F%E6%B4%9E/Foxit%20PDF%20Reader%20%E5%8F%8A%20Editor%20%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2023-27363.mdPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-27363

请登录查看更多情报信息。

Same Patch Batch · Foxit · 2024-05-03 · 46 CVEs total

CVE-2023-27330Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2023-42094Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2023-42096Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
CVE-2023-42089Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability
CVE-2023-42098Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
CVE-2023-42093Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
CVE-2023-42092Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
CVE-2023-42095Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2023-42091Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability
CVE-2023-27364Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerabi
CVE-2023-27365Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerabi
CVE-2023-27331Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2023-27329Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2023-27366Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
CVE-2023-38115Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2023-38113Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
CVE-2023-38118Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerabili
CVE-2023-38119Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability
CVE-2023-38106Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2023-38116Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: PDF Reader
Same vendor: Foxit
Same weakness: CWE-749

V. Comments for CVE-2023-27363

No comments yet

Leave a comment