CVE-2017-10952

CVE-2017-10952 is a critical remote code execution vulnerability affecting Foxit Reader version 8.2.0.2051. The flaw resides in the saveAs JavaScript function, stemming from insufficient validation of user-supplied data, which allows for arbitrary file writing. Exploitation requires user interaction, typically by opening a malicious file or visiting a malicious page. This vulnerability carries a high CVSS score of 8.8, indicating significant potential for impact, including complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered community discussion and media attention, suggesting awareness among researchers.