Plateforme
windows
Composant
foxit-reader
Corrigé dans
9.4.16812
CVE-2019-6758 is an information disclosure vulnerability affecting Foxit Reader versions 9.4.16811. This flaw allows remote attackers to potentially expose sensitive information if a user visits a malicious page or opens a malicious file. A fix is available in version 9.4.16812, and users are strongly encouraged to upgrade.
The primary impact of CVE-2019-6758 is the potential disclosure of sensitive information. While the vulnerability is rated as LOW severity, the ability to extract data from a user's system can be significant, particularly if the data includes confidential documents, credentials, or other sensitive information. The vulnerability resides within the ConvertToPDF_x86.dll component, suggesting that PDF conversion processes are a key area of concern. An attacker could potentially chain this information disclosure with other vulnerabilities to escalate privileges or gain further access to the system, though this is not explicitly stated in the description.
CVE-2019-6758 was reported to ZDI (ZDI-CAN-7701) and subsequently publicly disclosed. There is no indication of active exploitation campaigns or KEV listing at the time of writing. Public proof-of-concept exploits are not widely available, which contributes to the LOW CVSS score. The vulnerability was published on 2019-06-03.
Organizations and individuals who rely on Foxit Reader for PDF viewing and editing are at risk. This includes users who frequently handle sensitive documents or operate in environments with a high risk of targeted attacks. Users who have not updated their Foxit Reader installations are particularly vulnerable.
• windows / supply-chain:
Get-Process foxitreader | Select-Object ProcessName, Path, CPU• windows / supply-chain:
Get-WinEvent -LogName Application -FilterXPath "*[System[Provider[@Name='Foxit Reader']]]" -MaxEvents 10• windows / supply-chain: Check Autoruns for suspicious entries related to Foxit Reader or ConvertToPDF_x86.dll using Sysinternals Autoruns.
disclosure
Statut de l'Exploit
EPSS
0.24% (percentile 47%)
Vecteur CVSS
The primary mitigation for CVE-2019-6758 is to upgrade Foxit Reader to version 9.4.16812 or later. If upgrading is not immediately feasible, consider implementing stricter controls on file downloads and website access to minimize the risk of exposure to malicious content. Educate users about the risks of opening attachments from untrusted sources. While no specific WAF rules or detection signatures are readily available, monitoring network traffic for unusual PDF conversion activity could provide an early warning sign. After upgrading, confirm the fix by attempting to open a known malicious PDF file (in a controlled environment) to verify that the information disclosure is no longer possible.
Mettez à jour Foxit Reader vers une version ultérieure à la 9.4.16811. Téléchargez la dernière version depuis le site web officiel de Foxit.
Analyses de vulnérabilités et alertes critiques directement dans votre boîte mail.
CVE-2019-6758 is a LOW severity information disclosure vulnerability in Foxit Reader 9.4.16811 that allows attackers to potentially expose sensitive data if a user opens a malicious file or visits a malicious page.
If you are using Foxit Reader version 9.4.16811, you are affected by this vulnerability. Upgrade to version 9.4.16812 or later to mitigate the risk.
The fix is to upgrade Foxit Reader to version 9.4.16812 or a later version. Download the latest version from the official Foxit Reader website.
There is no current evidence of active exploitation campaigns targeting CVE-2019-6758, but it is still important to apply the patch to prevent potential future attacks.
Refer to the Foxit Reader security advisory for details: [https://www.foxit.com/security/bulletins/pdf-sdk-information-disclosure-vulnerability](https://www.foxit.com/security/bulletins/pdf-sdk-information-disclosure-vulnerability)
Téléverse ton fichier de dépendances et découvre instantanément si cette CVE et d'autres te touchent.