Vulnerabilities > CVE-2022-30557 - Type Confusion vulnerability in Foxit PDF Editor and PDF Reader

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

foxit

CWE-843

NVD

Published: 2022-05-11

Updated: 2022-05-20

Summary

Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution.

Vulnerable Configurations

Part	Description	Count
Application	Foxit Foxit PDF Editor - Foxit PDF Editor 10.1.6.37749 Foxit PDF Editor 10.1.7 Foxit PDF Editor 11.0.0 Foxit PDF Editor 11.0.0.49893 Foxit PDF Editor 11.0.1.0719 Foxit PDF Editor 11.1 Foxit PDF Editor 11.2.0.53415 Foxit PDF Editor 11.2.1 Foxit PDF Reader - Foxit PDF Reader 8.3.2.25013 Foxit PDF Reader 9.0.1.1049 Foxit PDF Reader 10.1.0.37527 Foxit PDF Reader 10.1.3.37598 Foxit PDF Reader 10.1.4.37651 Foxit PDF Reader 11.0.0.49893 Foxit PDF Reader 11.0.1.0719 Foxit PDF Reader 11.0.1.49938 Foxit PDF Reader 11.1 Foxit PDF Reader 11.1.0.52543 Foxit PDF Reader 11.2.1 Foxit PDF Reader 11.2.1.53537	22
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

References

https://www.foxit.com/support/security-bulletins.html