CVE-2020-17436

Vulnerability

This vulnerability exists in Foxit Studio Photo version 3.6.6.922 and affects the parsing of CMP files. The specific flaw results from a lack of proper validation of user-supplied data, which can cause a read past the end of an allocated structure, leading to an out-of-bounds read [2].

Exploitation

Remote attackers can exploit this vulnerability by convincing a user to visit a malicious page or open a malicious CMP file. No authentication or special network position is required; the attack relies on user interaction. The flaw lies in the CMP parsing routine, which processes data without proper bounds checking [2].

Impact

Successful exploitation allows an attacker to disclose sensitive information from the application's memory. While the direct impact is limited to information disclosure (CVSS 3.3, low confidentiality impact), an attacker can leverage this vulnerability in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process [1][2].

Mitigation

Foxit has not released a specific patch for this vulnerability in Studio Photo. The Foxit security bulletin [1] covers updates for Foxit PDF Reader and Foxit PDF Editor but does not address Studio Photo. Users should consider upgrading to the latest version of Foxit Studio Photo if available or monitor Foxit's security bulletins for future updates. No workaround has been publicly disclosed.