CVE-2020-35990

MediumCVSS 5.5

Published: 11/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A buffer overflow vulnerability in the cFilenameInit parameter of the browseForDoc function in Foxit PDF Reader 10.1.0.37527 allows local attackers to cause a denial of service (DoS) via a crafted PDF file.

Risk Assessment

A local attacker can crash the application, leading to user disruption and potential loss of unsaved data.

Recommendation

It is recommended to update Foxit PDF Reader to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) via crafted .pdf file.