CVE-2022-37332 PoC — Foxit PDF Reader 资源管理错误漏洞

Source

https://github.com/SpiralBL0CK/CVE-2022-37332-RCE-

Associated Vulnerability

Title:Foxit PDF Reader 资源管理错误漏洞 (CVE-2022-37332)
Description:Foxit PDF Reader是中国福昕（Foxit）公司的一款PDF阅读器。 Foxit PDF Reader 12.0.1.12430版本存在资源管理错误漏洞，该漏洞源于JavaScript引擎中存在释放后重用，攻击者通过诱骗用户打开恶意文件可以触发此漏洞，这可能导致任意代码执行。

Description

CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING .....

Readme

Foxit nday :)

CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING .....

also tested on Version:  9.0.1.1049 so yeahh idk :) enjoy

File Snapshot


 [4.0K]  /data/pocs/e67548f6fb1f1a7dfd45cefadcf0f365dbd5e6fd
├── [ 144]  README.md
├── [4.6K]  spray_jit.js
└── [1.1K]  uaf.js

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!