CVE-2020-17435

Vulnerability

This vulnerability exists in Foxit Studio Photo version 3.6.6.922 during the parsing of CR2 files. The specific flaw results from a lack of proper validation of user-supplied data, which can cause a read past the end of an allocated structure [1][2].

Exploitation

The attacker must convince a user to visit a malicious webpage or open a specially crafted CR2 file. No authentication is required, and the attack is local in the sense that user interaction is needed [2]. Once the file is parsed, the out-of-bounds read occurs due to insufficient bounds checking [1].

Impact

Successful exploitation leads to disclosure of sensitive information (an information disclosure vulnerability) within the context of the current process. The CVSS score is 3.3 (low), with confidentiality impact rated as low. However, the advisory notes that an attacker could leverage this in conjunction with other vulnerabilities to achieve code execution [1][2].

Mitigation

According to Foxit's security bulletins, the company has released updates for Foxit PDF Reader and Foxit PDF Editor, but as of the published references, no specific fix for Foxit Studio Photo 3.6.6.922 is mentioned [1]. Users should monitor Foxit's security page for updates and consider limiting exposure by avoiding opening untrusted CR2 files until a patch is available.