CVE-2019-6773: Information Disclosure in Foxit Reader

Successful exploitation of CVE-2019-6773 allows an attacker to disclose sensitive information stored within Foxit Reader documents. While the vulnerability requires user interaction, the potential impact is significant, as attackers could gain access to confidential data such as financial records, personal information, or proprietary business documents embedded within PDF files. The attack vector involves crafting a malicious PDF document that exploits the flawed object validation logic. This could be delivered via phishing emails, malicious websites, or compromised file shares. The blast radius is limited to users who open the malicious document with a vulnerable version of Foxit Reader.

1. Reserved2019-01-24
2. Published2019-06-03
3. Modified2024-08-04
4. EPSS updated2026-04-02

The primary mitigation for CVE-2019-6773 is to upgrade Foxit Reader to version 9.4.2 or later. If immediate upgrading is not possible, consider implementing stricter controls on file downloads and email attachments to prevent users from opening potentially malicious PDF files. Educate users about the risks of opening untrusted documents. While a direct WAF rule is unlikely to be effective, network-level intrusion detection systems (IDS) could be configured to monitor for suspicious network traffic patterns associated with PDF file exploitation attempts. After upgrading, confirm the fix by attempting to open a known malicious PDF file (in a controlled environment) to verify that the vulnerability is no longer exploitable.