← Back to browse · API

CVE-2021-34850

Severity
HIGH
CVSS
7.8
EPSS
0.38251
Risk score
44.59
CISA KEV
No
PoC
No
Published
2021-08-04
Modified
2024-08-04
First seen
2026-08-08
Aliases
EUVD-2021-21497, GHSA-2MFH-JHF2-VX33
Products
Foxit:PDF Reader 11.0.0.49893
Sources
euvd EUVD-2021-21497

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14529.

References