CVE-2020-14425

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2020-11-02

Last modified

2024-08-04

Affected products

• Foxit Reader (Foxitsoftware)

References

• http://packetstormsecurity.com/files/159784/Foxit-Reader-9.7.1-Remote-Command-Execution.html
• https://www.exploit-db.com/exploits/48982
• https://www.foxitsoftware.com/support/security-bulletins.php