Foxit Reader PDF Command Injection Remote Code Execution (CVE-2017-10951)

A remote code execution vulnerability has been reported in Foxit Reader. The vulnerability is due improper validation of a string before using it to execute a system call. A remote attacker could exploit this vulnerability by enticing a user to click a maliciously crafted file. Successful exploitation could lead to arbitrary code execution.

from Check Point Update Services Advisories http://ift.tt/2xdyCoc

No comments:

Post a Comment

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...