CVE-2020-13547
CVE-2020-13547
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.8EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 dez 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
n/a · FoxitQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →