CVE-2019-6747

Vulnerability

The vulnerability exists in Foxit Studio Photo version 3.6.6 and likely earlier versions [1]. The specific flaw resides in the handling of EZI files. When the application parses a specially crafted EZI file, it fails to properly validate user-supplied data, leading to a write past the end of an allocated structure (out-of-bounds write) [2].

Exploitation

Exploitation requires user interaction; the target must either visit a malicious webpage or open a malicious file [2]. An attacker can craft an EZI file that triggers the out-of-bounds write when parsed by Foxit Studio Photo. No additional authentication or special privileges are needed beyond the user performing the action [2].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process [2]. The CVSS v3 score is 7.8, reflecting high impact on confidentiality, integrity, and availability [2]. The attacker gains the same privileges as the user running Foxit Studio Photo, potentially leading to full system compromise if that user has administrative rights.

Mitigation

Foxit has not released a specific patch for Foxit Studio Photo, as the product is likely no longer supported [1]. Users should consider upgrading to a supported product such as Foxit PDF Reader or Foxit PDF Editor, which receive regular security updates [1]. No workaround is available. The vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog as of the writing date.