VYPR
← All advisories
High severity8.4NVD Advisory· Published Mar 5, 2024· Updated Jun 17, 2026

CVE-2024-25858

CVE-2024-25858

Description

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Foxitsoftware/PDF Editor2 versions
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <2024.4
    • (no CPE)range: <2024.1
  • Foxitsoftware/PDF Reader2 versions
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: <2024.4
    • (no CPE)range: <2024.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.