high8.8
CVE-2023-32664
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332.
Impact
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. User would need to open a malicious file to trigger the vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxit | Pdf Reader | Version 12.1.2.15332 |