Foxit PDF Reader versions prior to 4.3.1.0218 expose a JavaScript API function, createDataObject(), which allows untrusted PDF content to write arbitrary files anywhere on the disk. This vulnerability can be exploited by embedding a malicious PDF that calls this API, enabling an attacker to drop executables or scripts into privileged folders. Consequently, this can lead to code execution the next time the system boots or the user logs in.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2011-10030 |
Exploitation
To exploit this vulnerability, an attacker can create a malicious PDF file that utilizes the createDataObject() JavaScript API function. When a user opens this PDF in an affected version of Foxit PDF Reader, the malicious script can execute and write files to arbitrary locations on the disk, potentially leading to unauthorized code execution.
Affected Products
- Foxit PDF Reader: A widely used PDF reader that is vulnerable to arbitrary file write due to the exposed JavaScript API.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Foxit PDF Reader that addresses this issue. Additionally, users should avoid opening untrusted PDF files and consider disabling JavaScript execution in the PDF reader settings.