CVE-2020-17425

Vulnerability

Foxit Studio Photo version 3.6.6.922 is vulnerable to a heap-based out-of-bounds write during the parsing of EPS files. The flaw is caused by a lack of proper validation of user-supplied data within the EPS parsing routine, leading to a write past the end of an allocated structure. Affected version: Foxit Studio Photo 3.6.6.922 [1][2].

Exploitation

Exploitation requires user interaction; the target must visit a malicious web page or open a malicious EPS file. An attacker can craft a specially crafted EPS file that triggers the out-of-bounds write when parsed by the vulnerable application. No authentication or special privileges are needed, as the vulnerability is accessible over the network via a remote attack vector [2].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. This can lead to full compromise of confidentiality, integrity, and availability of the affected system, as the attacker can run arbitrary commands with the privileges of the Foxit Studio Photo process [2].

Mitigation

As of the available references, a fixed version of Foxit Studio Photo has not been explicitly disclosed for this CVE. Foxit’s security bulletins primarily cover Foxit PDF Reader and Foxit PDF Editor, not Studio Photo. Users should monitor Foxit’s advisory page or consider isolating the application until an official patch is released [1].