CVE-2023-35985

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted malicious site if the browser plugin extension is enabled.

Existe una vulnerabilidad de creación de archivos arbitrarios en la API Javascript exportDataObject de Foxit Reader 12.1.3.15356 debido a una falla al validar correctamente una extensión peligrosa. Un archivo malicioso especialmente manipulado puede crear archivos en ubicaciones arbitrarias, lo que puede provocar la ejecución de código arbitrario. Un atacante debe engañar al usuario para que abra el archivo malicioso para desencadenar esta vulnerabilidad. La explotación también es posible si un usuario visita un sitio malicioso especialmente manipulado si la extensión del complemento del navegador está habilitada.

*Credits: Discovered by Kamlapati Choubey of Cisco Talos.

CVSS Scores

NISTv3.1 8.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-08-15 CVE Reserved
2023-11-27 CVE Published
2023-12-02 EPSS Updated
2023-12-30 First Exploit
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-73: External Control of File Name or Path
CWE-610: Externally Controlled Reference to a Resource in Another Sphere

CAPEC

References (3)

URL	Tag	Source

URL	Date	SRC
https://github.com/SpiralBL0CK/-CVE-2023-35985	2023-12-30
https://github.com/N00BIER/CVE-2023-35985	2024-07-02
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1834	2024-08-02

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Foxitsoftware Search vendor "Foxitsoftware"		Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader"				12.1.3.15356 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "12.1.3.15356"		-		Affected