CVE-2020-17423

Vulnerability

This heap-based buffer overflow vulnerability exists in Foxit Studio Photo version 3.6.6.922. The specific flaw resides in the handling of ARW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer, enabling memory corruption. Attackers must convince a user to open a malicious ARW file or visit a malicious page.

Exploitation

An attacker can exploit this vulnerability remotely by crafting a specially formatted ARW file that triggers the buffer overflow. The target must interact by opening the malicious file or visiting a page that loads it. No authentication is required, and the attacker does not need any special network position beyond the ability to deliver the file or link to the user [2].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. Given the CVSS score of 7.8, this leads to full compromise of confidentiality, integrity, and availability on the affected system [2]. The attacker gains the same privileges as the logged-on user.

Mitigation

Foxit has not released a specific fix for Foxit Studio Photo 3.6.6.922 in the publicly available references. The vendor's security bulletins mention updates for Foxit PDF Reader and Editor, but not for Studio Photo [1]. Users should monitor Foxit's security page for future updates or consider replacing the product if it is no longer supported.