CVE-2018-17655 : What You Need to Know

Foxit Reader 9.2.0.9297 allows remote attackers to execute arbitrary code by exploiting a vulnerability in the moveInstance method of a Form object.

Understanding CVE-2018-17655

This CVE entry describes a critical vulnerability in Foxit Reader 9.2.0.9297 that enables attackers to run arbitrary code on affected systems.

What is CVE-2018-17655?

The vulnerability in Foxit Reader 9.2.0.9297 allows remote attackers to execute arbitrary code by manipulating the moveInstance method of a Form object without proper validation.

The Impact of CVE-2018-17655

Attackers can exploit this vulnerability to run arbitrary code on susceptible installations of Foxit Reader 9.2.0.9297.
User interaction is required, either by visiting a malicious webpage or opening a malicious file.
The flaw arises from the lack of verifying the existence of the object before processing the moveInstance method, enabling code execution within the ongoing process.
The vulnerability is identified as ZDI-CAN-6505.

Technical Details of CVE-2018-17655

This section provides detailed technical information about the CVE.

Vulnerability Description

The vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297 by exploiting the moveInstance method of a Form object.

Affected Systems and Versions

Product: Foxit Reader
Vendor: Foxit
Version: 9.2.0.9297

Exploitation Mechanism

Attackers can exploit the vulnerability by manipulating the moveInstance method of a Form object without verifying the object's existence first.

Mitigation and Prevention

Protecting systems from CVE-2018-17655 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Foxit Reader to a patched version that addresses the vulnerability.
Avoid visiting suspicious websites or opening files from unknown sources.

Long-Term Security Practices

Regularly update software and applications to mitigate potential vulnerabilities.
Implement security measures such as firewalls and antivirus software to prevent malicious attacks.

Patching and Updates

Foxit Software has released patches to address the vulnerability. Ensure all systems running Foxit Reader 9.2.0.9297 are updated to the latest secure version.