CVE-2020-17422

Vulnerability

Foxit Studio Photo version 3.6.6.922 is affected by an out-of-bounds read vulnerability in the handling of EPS files. The flaw exists due to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. The vulnerability is identified as CVE-2020-17422 (ZDI-CAN-11195) and requires user interaction to be triggered [1][2].

Exploitation

An attacker can exploit this vulnerability by convincing a target to visit a malicious page or open a specially crafted EPS file. No special privileges or authentication are required; user interaction is the only prerequisite. The specific sequence involves the EPS parser reading beyond the bounds of an allocated structure when processing the malicious file [2].

Impact

Successful exploitation allows an attacker to disclose sensitive information from the memory space of the affected process. While the vulnerability itself only leaks information, an attacker can potentially leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process [2].

Mitigation

As of the publication date, no specific fix for CVE-2020-17422 has been confirmed in available references. Users should exercise caution when opening EPS files from untrusted sources. The vendor's security bulletins page [1] lists updates for other Foxit products but does not mention a patch for Studio Photo. Users are advised to monitor the vendor's website for updates.