Cette vulnérabilité permet à des attaquants distants de divulguer des informations sensibles sur les installations vulnérables de Foxit Reader 9.4.1.16828. Une interaction de l'utilisateur est requise pour exploiter cette vulnérabilité, notamment en visitant une page malveillante ou en ouvrant un fichier malveillant.

Successful exploitation of CVE-2019-6773 allows an attacker to disclose sensitive information stored within Foxit Reader documents. While the vulnerability requires user interaction, the potential impact is significant, as attackers could gain access to confidential data such as financial records, personal information, or proprietary business documents embedded within PDF files. The attack vector involves crafting a malicious PDF document that exploits the flawed object validation logic. This could be delivered via phishing emails, malicious websites, or compromised file shares. The blast radius is limited to users who open the malicious document with a vulnerable version of Foxit Reader.

Users who rely on Foxit Reader for viewing and managing PDF documents are at risk, particularly those who frequently open PDF files from external sources or untrusted websites. Organizations with legacy systems or configurations that prevent timely software updates are also at increased risk. Shared hosting environments where users have limited control over their software versions are also vulnerable.

• windows / desktop:

Get-Process foxitreader | Select-Object ProcessName, Id, CPU

• windows / desktop:

Get-ItemProperty -Path 'HKLM:\Software\Foxit Software\Foxit Reader' -Name Version

• windows / desktop: Check Autoruns for suspicious entries related to Foxit Reader or PDF processing. • windows / desktop: Review Windows Defender alerts for suspicious activity related to PDF files or Foxit Reader processes.

1. 2019-06-03Disclosure

   disclosure

1. Réservé2019-01-24
2. Publiée2019-06-03
3. Modifiée2024-08-04
4. EPSS mis à jour2026-04-02

The primary mitigation for CVE-2019-6773 is to upgrade Foxit Reader to version 9.4.2 or later. If immediate upgrading is not possible, consider implementing stricter controls on file downloads and email attachments to prevent users from opening potentially malicious PDF files. Educate users about the risks of opening untrusted documents. While a direct WAF rule is unlikely to be effective, network-level intrusion detection systems (IDS) could be configured to monitor for suspicious network traffic patterns associated with PDF file exploitation attempts. After upgrading, confirm the fix by attempting to open a known malicious PDF file (in a controlled environment) to verify that the vulnerability is no longer exploitable.