Foxit PDF Reader PRC File Parsing Out-of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability allowing information disclosure has been identified in Foxit PDF Reader. This issue arises in the PRC file parsing process, where improper validation of user-supplied data can lead to reading beyond the limits of an allocated object. As a result, remote attackers could exploit this vulnerability to access sensitive information on affected systems. Exploitation requires user interaction, such as opening a malicious PRC file or visiting a harmful webpage.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Foxit has released a security update to address this vulnerability. Users can download the latest version of Foxit PDF Reader from the Foxit website or use the built-in update feature. For more information, visit the Foxit Security Bulletins page.