バージョン情報によると、リモート Windows ホストにインストールされている Foxit PDF Editor (旧称: Foxit PhantomPDF) は、13.1.4より前です。そのため、以下の複数の脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 13.1.4. It is, therefore affected by multiple vulnerabilities:

  - An issue in Foxit Software Foxit PDF Reader v.2024.2.2.25170 allows a local attacker to execute arbitrary     code via the FoxitPDFReaderUpdater.exe component (CVE-2024-41605)

  - Addressed potential issues where the application could be exposed to a Use-After-Free vulnerability and     crash when handling certain checkbox field objects, Annotation objects, or AcroForms, which attackers     could exploit to execute remote code or disclose information. This occurs as the application uses a wild     pointer or an object that has been freed without proper validation, fails to properly synchronize the     annotation items when handling the Reply Note of an annotation using JavaScript, or fails to correctly     update the font cache after deleting a page. (CVE-2024-28888, ZDI-CAN-23932, ZDI-CAN-24135, ZDI-CAN-24489,     ZDI-CAN-24491, ZDI-CAN-24492, ZDI-CAN-24490, ZDI-CAN-25173, ZDI-CAN-25174, ZDI-CAN-25267) (CVE-2024-28888)

  - Addressed potential issues where the application could be exposed to a Privilege Escalation vulnerability     when performing an update or installing a plugin, which attackers could exploit to delete arbitrary files     or execute arbitrary code so as to carry out privilege escalation attacks. This occurs due to the     incorrect permission assignment on the resources used by the update service, improper signature validation     and incomplete certificate check for the updater, weak randomness setting for the name of the temporary     folder during a plugin installation, or improper DLL loading without using the built-in manifest file.
    (ZDI-CAN-23966, ZDI-CAN-23933, CVE-2024-38393) (CVE-2024-38393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Reader application (previously named Foxit Reader) installed on the remote Windows host is prior to 2024.3. It is, therefore affected by multiple vulnerabilities:

  - An issue in Foxit Software Foxit PDF Reader v.2024.2.2.25170 allows a local attacker to execute arbitrary     code via the FoxitPDFReaderUpdater.exe component (CVE-2024-41605)

  - Addressed potential issues where the application could be exposed to a Use-After-Free vulnerability and     crash when handling certain checkbox field objects, Annotation objects, or AcroForms, which attackers     could exploit to execute remote code or disclose information. This occurs as the application uses a wild     pointer or an object that has been freed without proper validation, fails to properly synchronize the     annotation items when handling the Reply Note of an annotation using JavaScript, or fails to correctly     update the font cache after deleting a page. (CVE-2024-28888, ZDI-CAN-23932, ZDI-CAN-24135, ZDI-CAN-24489,     ZDI-CAN-24491, ZDI-CAN-24492, ZDI-CAN-24490, ZDI-CAN-25173, ZDI-CAN-25174, ZDI-CAN-25267) (CVE-2024-28888)

  - Addressed potential issues where the application could be exposed to a Privilege Escalation vulnerability     when performing an update or installing a plugin, which attackers could exploit to delete arbitrary files     or execute arbitrary code so as to carry out privilege escalation attacks. This occurs due to the     incorrect permission assignment on the resources used by the update service, improper signature validation     and incomplete certificate check for the updater, weak randomness setting for the name of the temporary     folder during a plugin installation, or improper DLL loading without using the built-in manifest file.
    (ZDI-CAN-23966, ZDI-CAN-23933, CVE-2024-38393) (CVE-2024-38393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 2024.3. It is, therefore affected by multiple vulnerabilities:

  - An issue in Foxit Software Foxit PDF Reader v.2024.2.2.25170 allows a local attacker to execute arbitrary     code via the FoxitPDFReaderUpdater.exe component (CVE-2024-41605)

  - Addressed potential issues where the application could be exposed to a Use-After-Free vulnerability and     crash when handling certain checkbox field objects, Annotation objects, or AcroForms, which attackers     could exploit to execute remote code or disclose information. This occurs as the application uses a wild     pointer or an object that has been freed without proper validation, fails to properly synchronize the     annotation items when handling the Reply Note of an annotation using JavaScript, or fails to correctly     update the font cache after deleting a page. (CVE-2024-28888, ZDI-CAN-23932, ZDI-CAN-24135, ZDI-CAN-24489,     ZDI-CAN-24491, ZDI-CAN-24492, ZDI-CAN-24490, ZDI-CAN-25173, ZDI-CAN-25174, ZDI-CAN-25267) (CVE-2024-28888)

  - Addressed potential issues where the application could be exposed to a Privilege Escalation vulnerability     when performing an update or installing a plugin, which attackers could exploit to delete arbitrary files     or execute arbitrary code so as to carry out privilege escalation attacks. This occurs due to the     incorrect permission assignment on the resources used by the update service, improper signature validation     and incomplete certificate check for the updater, weak randomness setting for the name of the temporary     folder during a plugin installation, or improper DLL loading without using the built-in manifest file.
    (ZDI-CAN-23966, ZDI-CAN-23933, CVE-2024-38393) (CVE-2024-38393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

バージョン情報によると、リモート Windows ホストにインストールされている Foxit PDF Reader (旧称: Foxit Reader) は、2024.3 より前です。そのため、以下の複数の脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

バージョン情報によると、リモート Windows ホストにインストールされている Foxit PDF Editor (旧称: Foxit PhantomPDF) は、2024.3より前です。そのため、以下の複数の脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
207793	Foxit PDF Editor < 13.1.4の複数の脆弱性	Nessus	Windows	2024/9/26	2024/9/27	high
207793	Foxit PDF Editor < 13.1.4 Multiple Vulnerabilities	Nessus	Windows	2024/9/26	2024/9/27	high
207795	Foxit PDF Reader < 2024.3 Multiple Vulnerabilities	Nessus	Windows	2024/9/26	2024/9/27	high
207796	Foxit PDF Editor < 2024.3 Multiple Vulnerabilities	Nessus	Windows	2024/9/26	2024/9/27	high
207795	Foxit PDF Reader < 2024.3 の複数の脆弱性	Nessus	Windows	2024/9/26	2024/9/27	high
207796	Foxit PDF Editor < 2024.3の複数の脆弱性	Nessus	Windows	2024/9/26	2024/9/27	high

検出

プラグインの検索

high

high

high

high

high

high