- #FOXIT PDF READER VS ADOBE UPDATE#
- #FOXIT PDF READER VS ADOBE CODE#
- #FOXIT PDF READER VS ADOBE FREE#
Other vulnerabilities addressed in Foxit PDF Reader could also result in remote code execution, in information disclosure, or in application crashes, Foxit reveals in the update’s release notes. A specially crafted PDF file could be used to exploit the flaw and disclose sensitive memory or, potentially, achieve arbitrary code execution. The fifth vulnerability (CVE-2018-3843) results from a type confusion in the way the PDF reader parses files with associated extensions. The former resides in the ' () ' method, which results in a use-after-free condition, while the latter resides in combinations of the ' createTemplate ' and ' closeDoc ' methods related to the program’s JavaScript functionality. The second bug, CVE-2018-3842, is a use of an uninitialized pointer flaw in the application’s JavaScript, and could be abused to achieve remote code execution.Ĭisco Talos found two other flaws in the JavaScript engine of Foxit PDF Reader, both use-after-free bugs: CVE-2018-3850 and CVE-2018-3853. Or, if the browser plugin is enabled, simply viewing the document on the internet could result in exploitation,” Talos explains. “There are a couple of different ways an adversary could leverage this attack, including tricking a user into opening a malicious PDF.
Thus, an attacker can use a specially crafted PDF document to trigger a previously freed object, thus achieving arbitrary code execution. When a document is closed, embedded JavaScript code continues to be executed, although used objects are freed up. The first of them, CVE-2017-14458, is a use-after-free in the JavaScript engine of the application.
#FOXIT PDF READER VS ADOBE UPDATE#
The new Foxit PDF Reader update also resolves five security vulnerabilities discovered by Cisco Talos security researchers, which could be exploited for code execution. By placing a malicious DLL in the specified path directory, an attacker could exploit the vulnerability and execute remote code. The issue occurs when the application fails to resolve the DLL because the file doesn’t exist at the specified path. The issue is created because the app “passes an insufficiently qualified path in loading an external library when a user launches the application,” the researcher explains. Released on Friday, the latest version of the application addresses an Unsafe DLL Loading security bug reported by Ye Yint Min Thu Htut.
#FOXIT PDF READER VS ADOBE FREE#
Foxit PDF products are also available for mobile platforms like iOS and Android.Foxit has addressed over a dozen vulnerabilities in their PDF Reader, a free application that provides users with an alternative to Adobe Acrobat Reader.ĭesigned for viewing, creating, and editing PDF documents, Foxit PDF Reader is a popular free program that also has a broadly used browser plugin available.
The top toolbar also enables emailing the document, sharing it on Facebook, taking a snapshot of a selected area of the document, as well as options like switching to Slideshow mode, managing bookmarks, attaching a file on page, exporting document content, etc.įoxit Reader is also available in the form of Enterprise Reader (with group policy support) and with a non-Windows version. The below screenshot demonstrates how you can modify a PDF document with Foxit Reader by adding notes, highlighting text and inserting images. Measure distances and area of objects within a document.Insert and underline specific parts of a document.The document in this image has been created from our Investor PowerPoint Template. The below image shows the Foxit Reader interface. Some of the major features of Foxit Reader include its ability to modify a PDF document, add/verify digital signatures, add comments, highlight, strikeout, insert and underline specific parts of a document, measure distances /area of objects (within a document), use the Typewriter tool for filling forms, sharing options for social networking websites, XFA form support, spell checking and bookmarking utility, enhanced security and more.
0 kommentar(er)
