CVE-2020-15629

Vulnerability

The vulnerability exists in Foxit Studio Photo version 3.6.6.922 within the handling of TIF files. The specific flaw is a lack of proper validation of user-supplied data, leading to a write past the end of an allocated structure (out-of-bounds write). User interaction is required: the target must open a malicious TIF file or visit a malicious page that triggers the parsing. [2]

Exploitation

An attacker can exploit this vulnerability by crafting a malicious TIF file and convincing a user to open it with Foxit Studio Photo. No additional privileges or authentication are needed. The user interaction is the only prerequisite. The out-of-bounds write occurs during parsing of the TIF file, allowing the attacker to overwrite adjacent memory. [2]

Impact

Successful exploitation allows the attacker to execute arbitrary code in the context of the current process, potentially leading to full compromise of the affected system. The CVSS score is 7.8 (High) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. [2]

Mitigation

As of the publication date of the available references, no official fix or workaround has been disclosed for Foxit Studio Photo. The Foxit security bulletins page [1] does not mention this specific vulnerability or product. Users should exercise caution when opening TIF files from untrusted sources and consider using alternative software until a patch is released.