CVE-2022-37332 PoC — Foxit PDF Reader 资源管理错误漏洞

Source

https://github.com/SpiralBL0CK/CVE-2022-37332-RCE-

Associated Vulnerability

Title:Foxit PDF Reader 资源管理错误漏洞 (CVE-2022-37332)
Description:A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

Description

CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING .....

Readme

Foxit nday :)

CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING .....

also tested on Version:  9.0.1.1049 so yeahh idk :) enjoy

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!