Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DOC files. The issue results from the lack of proper restrictions on macro-enabled documents. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-19739.
References
Link | Resource |
---|---|
https://www.foxit.com/support/security-bulletins.html | Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-23-493/ | Third Party Advisory |
https://www.foxit.com/support/security-bulletins.html | Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-23-493/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
11 Aug 2025, 19:31
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:* cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
References | () https://www.foxit.com/support/security-bulletins.html - Vendor Advisory | |
References | () https://www.zerodayinitiative.com/advisories/ZDI-23-493/ - Third Party Advisory | |
First Time |
Foxit pdf Reader
Foxit pdf Editor Microsoft Microsoft windows Foxit |
21 Nov 2024, 07:52
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.foxit.com/support/security-bulletins.html - | |
References | () https://www.zerodayinitiative.com/advisories/ZDI-23-493/ - |
18 Sep 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
Summary | (en) Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC files. The issue results from the lack of proper restrictions on macro-enabled documents. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-19739. |
03 May 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-03 02:15
Updated : 2025-08-11 19:31
NVD link : CVE-2023-27365
Mitre link : CVE-2023-27365
CVE.ORG link : CVE-2023-27365
JSON object : View
Products Affected
microsoft
- windows
foxit
- pdf_editor
- pdf_reader
CWE
CWE-749
Exposed Dangerous Method or Function