CVE-2019-17138

Vulnerability

The vulnerability exists in Foxit Studio Photo version 3.6.6.909 during the conversion from JPEG to EPS format. The specific flaw is an out-of-bounds read caused by improper validation of user-supplied data, resulting in a read past the end of an allocated structure [2]. This code path is reachable when the application processes a specially crafted JPEG file.

Exploitation

An attacker must convince a user to visit a malicious webpage or open a malicious file that triggers the JPEG-to-EPS conversion [2]. No authentication or special privileges are required; user interaction is the sole prerequisite. The attacker supplies crafted data that causes the out-of-bounds read.

Impact

Successful exploitation allows an attacker to disclose sensitive information from the process memory. The ZDI advisory notes that this vulnerability can be leveraged in conjunction with other vulnerabilities to achieve code execution in the context of the current process [2]. The CVSS score is 3.3 (Low), with confidentiality impact limited to low-level information disclosure.

Mitigation

No official fix has been disclosed in the available references. The Foxit security bulletins page [1] does not list a specific update for Foxit Studio Photo. Users should exercise caution when opening untrusted files and consider using alternative software until a patch is released.