CVE-2024-25858

Published: Mar 5, 2024Modified: May 23, 2025

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

Affected (2)

Products: Foxit: Pdf Editor, Pdf Reader

Foxit

2 products

Pdf Editor

Pdf Reader

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Foxit Pdf Editor	Before 2024.4
Foxit Pdf Reader	Before 2024.4

Related CWEs

CWE-450

Multiple Interpretations of UI Input

The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.

References (2)

https://www.foxit.com/support/security-bulletins.html

Source: cve@mitre.org

Vendor Advisory

https://www.foxit.com/support/security-bulletins.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.