CVE-2018-17658 : Security Advisory and Response

Foxit Reader 9.2.0.9297 is vulnerable to remote code execution due to a flaw in handling host object properties.

Understanding CVE-2018-17658

This CVE involves a vulnerability in Foxit Reader 9.2.0.9297 that allows attackers to execute arbitrary code.

What is CVE-2018-17658?

Attackers can run code within the current process by exploiting a flaw in handling the response property of a host object.
User interaction is required for exploitation, typically through visiting a malicious page or opening a malicious file.

The Impact of CVE-2018-17658

Remote attackers can execute arbitrary code on systems with the vulnerable Foxit Reader version.
The vulnerability is identified as ZDI-CAN-6509 and falls under CWE-416: Use After Free.

Technical Details of CVE-2018-17658

Foxit Reader 9.2.0.9297 vulnerability details.

Vulnerability Description

The flaw arises from not verifying the existence of an object before performing operations on it.

Affected Systems and Versions

Product: Foxit Reader
Vendor: Foxit
Version: 9.2.0.9297

Exploitation Mechanism

Attackers exploit the vulnerability by manipulating the response property of a host object.

Mitigation and Prevention

Protecting systems from CVE-2018-17658.

Immediate Steps to Take

Update Foxit Reader to a non-vulnerable version.
Avoid interacting with suspicious or untrusted files or websites.

Long-Term Security Practices

Regularly update software and security patches.
Implement security awareness training for users.

Patching and Updates

Foxit may release patches or updates to address this vulnerability.