Cyber Risks · Cisco Talos

Vulnerability Spotlight: Foxit PDF Reader Java Script Remote Code Execution Vulns

Summary: Cisco Talos disclosed a Foxit PDF Reader JavaScript remote code execution vulnerability that a specially crafted PDF file can trigger. An adversary could exploit it by tricking a user into opening a malicious PDF or, if the browser plugin is enabled, by simply viewing the document on the Internet.

What you should know: A PDF that executes code on open turns a routine document into an attack path, and with the browser plugin enabled, a user may not even need to open the file - just view it.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related