CVE-2021-27270

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12230.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
7.182

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-27270 are fixed in Foxit Reader (ML) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit Reader (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit Reader Enterprise (ML) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit Reader Enterprise (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit PhantomPDF 10 (EXE) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-27270 are fixed in Foxit PhantomPDF 10 (MSI) (10.1.3.37598)Windows
Vulnerabilities CVE-2021-21822 are fixed in Foxit Reader (ML) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.3.37598)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-318838Foxit Reader (ML) (10.1.3.37598)
PATCH-318837Foxit Reader (10.1.3.37598)
PATCH-318840Foxit Reader Enterprise (ML) (10.1.3.37598)
PATCH-318839Foxit Reader Enterprise (10.1.3.37598)
PATCH-318842Foxit PhantomPDF 10 (ML) (EXE) (10.1.3.37598)
PATCH-318844Foxit PhantomPDF 10 (ML) (MSI) (10.1.3.37598)
PATCH-318841Foxit PhantomPDF 10 (EXE) (10.1.3.37598)
PATCH-318843Foxit PhantomPDF 10 (MSI) (10.1.3.37598)
PATCH-319471Foxit Reader (ML) (10.1.4.37651)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234