Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
CERTFR-2024-AVI-0816
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Foxit. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | PDF Editor versions antérieures à 13.1.4 pour Windows et Mac | ||
| Foxit | PDF Reader | PDF Reader versions antérieures à 2024.3 pour Windows et Mac | ||
| Foxit | PDF Editor | PDF Editor versions antérieures à 2024.3 pour Windows et Mac |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 13.1.4 pour Windows et Mac",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "PDF Reader versions ant\u00e9rieures \u00e0 2024.3 pour Windows et Mac",
"product": {
"name": "PDF Reader",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 2024.3 pour Windows et Mac",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0816",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-09-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Foxit. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Foxit",
"vendor_advisories": [
{
"published_at": "2024-09-26",
"title": "Bulletin de s\u00e9curit\u00e9 Foxit",
"url": "https://www.foxit.com/support/security-bulletins.html#content-2024"
}
]
}
CERTFR-2024-AVI-0824
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Foxit PDF Editor. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | PDF Editor versions antérieures à 12.1.8 pour Windows |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 12.1.8 pour Windows",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-9256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9256"
},
{
"name": "CVE-2024-9248",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9248"
},
{
"name": "CVE-2024-7722",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7722"
},
{
"name": "CVE-2024-9253",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9253"
},
{
"name": "CVE-2024-9252",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9252"
},
{
"name": "CVE-2024-9249",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9249"
},
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-7724",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7724"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-9250",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9250"
},
{
"name": "CVE-2024-9247",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9247"
},
{
"name": "CVE-2024-9246",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9246"
},
{
"name": "CVE-2024-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9251"
},
{
"name": "CVE-2024-9254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9254"
},
{
"name": "CVE-2024-9255",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9255"
},
{
"name": "CVE-2024-9245",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9245"
},
{
"name": "CVE-2024-9243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9243"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-7723",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7723"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
},
{
"name": "CVE-2024-9244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9244"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0824",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-09-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Foxit PDF Editor. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Foxit PDF Editor",
"vendor_advisories": [
{
"published_at": "2024-12-17",
"title": "Bulletin de s\u00e9curit\u00e9 Foxit",
"url": "https://www.foxit.com/support/security-bulletins.html"
}
]
}
CERTFR-2024-AVI-0904
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans FoxIT PDF Editor. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | Foxit PDF Editor pour Windows versions 11.2.x antérieures à 11.2.11 | ||
| Foxit | PDF Editor | Foxit PDF Editor pour Mac versions 12.x antérieures à 12.1.6 | ||
| Foxit | PDF Editor | Foxit PDF Editor pour Mac versions 11.1.x antérieures à 11.1.10 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Foxit PDF Editor pour Windows versions 11.2.x ant\u00e9rieures \u00e0 11.2.11",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "Foxit PDF Editor pour Mac versions 12.x ant\u00e9rieures \u00e0 12.1.6",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "Foxit PDF Editor pour Mac versions 11.1.x ant\u00e9rieures \u00e0 11.1.10",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-9256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9256"
},
{
"name": "CVE-2024-9248",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9248"
},
{
"name": "CVE-2024-7722",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7722"
},
{
"name": "CVE-2024-9253",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9253"
},
{
"name": "CVE-2024-9252",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9252"
},
{
"name": "CVE-2024-9249",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9249"
},
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-7724",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7724"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-9250",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9250"
},
{
"name": "CVE-2024-9247",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9247"
},
{
"name": "CVE-2024-9246",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9246"
},
{
"name": "CVE-2024-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9251"
},
{
"name": "CVE-2024-9254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9254"
},
{
"name": "CVE-2024-9255",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9255"
},
{
"name": "CVE-2024-9245",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9245"
},
{
"name": "CVE-2024-9243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9243"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-7723",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7723"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
},
{
"name": "CVE-2024-9244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9244"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0904",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-10-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans FoxIT PDF Editor. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Foxit PDF Editor",
"vendor_advisories": [
{
"published_at": "2024-10-18",
"title": "Bulletin de s\u00e9curit\u00e9 FoxIT security-bulletins.php",
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
}
]
}
CERTFR-2024-AVI-0816
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Foxit. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | PDF Editor versions antérieures à 13.1.4 pour Windows et Mac | ||
| Foxit | PDF Reader | PDF Reader versions antérieures à 2024.3 pour Windows et Mac | ||
| Foxit | PDF Editor | PDF Editor versions antérieures à 2024.3 pour Windows et Mac |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 13.1.4 pour Windows et Mac",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "PDF Reader versions ant\u00e9rieures \u00e0 2024.3 pour Windows et Mac",
"product": {
"name": "PDF Reader",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 2024.3 pour Windows et Mac",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0816",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-09-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Foxit. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Foxit",
"vendor_advisories": [
{
"published_at": "2024-09-26",
"title": "Bulletin de s\u00e9curit\u00e9 Foxit",
"url": "https://www.foxit.com/support/security-bulletins.html#content-2024"
}
]
}
CERTFR-2024-AVI-0824
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Foxit PDF Editor. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | PDF Editor versions antérieures à 12.1.8 pour Windows |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PDF Editor versions ant\u00e9rieures \u00e0 12.1.8 pour Windows",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-9256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9256"
},
{
"name": "CVE-2024-9248",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9248"
},
{
"name": "CVE-2024-7722",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7722"
},
{
"name": "CVE-2024-9253",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9253"
},
{
"name": "CVE-2024-9252",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9252"
},
{
"name": "CVE-2024-9249",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9249"
},
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-7724",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7724"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-9250",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9250"
},
{
"name": "CVE-2024-9247",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9247"
},
{
"name": "CVE-2024-9246",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9246"
},
{
"name": "CVE-2024-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9251"
},
{
"name": "CVE-2024-9254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9254"
},
{
"name": "CVE-2024-9255",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9255"
},
{
"name": "CVE-2024-9245",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9245"
},
{
"name": "CVE-2024-9243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9243"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-7723",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7723"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
},
{
"name": "CVE-2024-9244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9244"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0824",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-09-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Foxit PDF Editor. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Foxit PDF Editor",
"vendor_advisories": [
{
"published_at": "2024-12-17",
"title": "Bulletin de s\u00e9curit\u00e9 Foxit",
"url": "https://www.foxit.com/support/security-bulletins.html"
}
]
}
CERTFR-2024-AVI-0904
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans FoxIT PDF Editor. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Foxit | PDF Editor | Foxit PDF Editor pour Windows versions 11.2.x antérieures à 11.2.11 | ||
| Foxit | PDF Editor | Foxit PDF Editor pour Mac versions 12.x antérieures à 12.1.6 | ||
| Foxit | PDF Editor | Foxit PDF Editor pour Mac versions 11.1.x antérieures à 11.1.10 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Foxit PDF Editor pour Windows versions 11.2.x ant\u00e9rieures \u00e0 11.2.11",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "Foxit PDF Editor pour Mac versions 12.x ant\u00e9rieures \u00e0 12.1.6",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
},
{
"description": "Foxit PDF Editor pour Mac versions 11.1.x ant\u00e9rieures \u00e0 11.1.10",
"product": {
"name": "PDF Editor",
"vendor": {
"name": "Foxit",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-9256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9256"
},
{
"name": "CVE-2024-9248",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9248"
},
{
"name": "CVE-2024-7722",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7722"
},
{
"name": "CVE-2024-9253",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9253"
},
{
"name": "CVE-2024-9252",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9252"
},
{
"name": "CVE-2024-9249",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9249"
},
{
"name": "CVE-2024-7725",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7725"
},
{
"name": "CVE-2024-7724",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7724"
},
{
"name": "CVE-2024-41605",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41605"
},
{
"name": "CVE-2024-9250",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9250"
},
{
"name": "CVE-2024-9247",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9247"
},
{
"name": "CVE-2024-9246",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9246"
},
{
"name": "CVE-2024-9251",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9251"
},
{
"name": "CVE-2024-9254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9254"
},
{
"name": "CVE-2024-9255",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9255"
},
{
"name": "CVE-2024-9245",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9245"
},
{
"name": "CVE-2024-9243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9243"
},
{
"name": "CVE-2024-28888",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28888"
},
{
"name": "CVE-2024-7723",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7723"
},
{
"name": "CVE-2024-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38393"
},
{
"name": "CVE-2024-9244",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9244"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0904",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-10-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans FoxIT PDF Editor. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Foxit PDF Editor",
"vendor_advisories": [
{
"published_at": "2024-10-18",
"title": "Bulletin de s\u00e9curit\u00e9 FoxIT security-bulletins.php",
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
}
]
}
NCSC-2024-0385
Vulnerability from csaf_ncscnl - Published: 2024-09-30 09:41 - Updated: 2024-09-30 09:41Summary
Kwetsbaarheden verholpen in Foxit PDF Editor en PDF Reader
Scope
21 vulnerabilities in this advisory, including CVE-2024-38393.
CVE-2024-38393
WID-SEC-W-2024-2220
Vulnerability from csaf_certbund - Published: 2024-09-25 22:00 - Updated: 2024-10-22 22:00Summary
Foxit PDF Editor und Reader: Mehrere Schwachstellen
Severity
Hoch
Scope
17 vulnerabilities in this advisory, including CVE-2024-38393.
CVE-2024-38393
In Foxit PDF Editor und Foxit Reader bestehen mehrere Schwachstellen. Diese Fehler existieren wegen verschiedener sicherheitsrelevanter Probleme, wie z.B. einer use-after-free, einer NULL-Zeiger-Dereferenz oder einer falschen Berechtigungszuweisung und mehr. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen preiszugeben. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
Known affected: 6 products