Outage in Foxit

Potential Security Risks PDF Reader/Editor

Resolved Minor
May 21, 2024 - Started over 1 year ago - Lasted about 13 hours
Official incident page

Incident Report

We wanted to bring to your attention recent reports about potential security risks related to Foxit PDF Editor & Reader. Some articles have discussed flaws and exploits that could be present in "specially crafted PDF" documents containing malware. Upon opening one of these documents, you may encounter a dialog box warning you about potential security risks associated with certain features in the document. This behavior is common among PDF applications from various vendors, as the PDF standard allows code fragments to be executed when PDF documents are opened. If you choose to enable these features, a second dialog box may appear, cautioning you that additional commands are about to be executed. The identified vulnerability lies in the default option ("Open") presented to customers, which could potentially lead to executing untrusted code and adverse consequences if selected. We are actively working on a fix for this issue, which we anticipate will be included in the 2024.3 update. We want to assure you that your security and safety are our top priorities, and we are committed to providing you with a secure and reliable experience with our products. Please note that this dialog box has always been a part of the application, and the default option to maximize security is being worked on for a future update. In the meantime, we recommend selecting the "NO" option if you encounter this dialog box to ensure your security remains protected. It is also recommend that you never execute embedded code from untrusted sources, regardless of the software product. If you have any further questions or concerns regarding this matter, please do not hesitate to reach out to our support team for assistance.

Need to monitor Foxit outages?

One place to monitor all your cloud vendors. Get instant alerts when an outage is detected.

Latest Updates ( sorted recent to last )
RESOLVED over 1 year ago - at 05/22/2024 02:37PM

This incident has been resolved.

MONITORING over 1 year ago - at 05/22/2024 01:17AM

We wanted to bring to your attention recent reports about potential security risks related to Foxit PDF Editor & Reader. Some articles have discussed flaws and exploits that could be present in "specially crafted PDF" documents containing malware.

Upon opening one of these documents, you may encounter a dialog box warning you about potential security risks associated with certain features in the document. This behavior is common among PDF applications from various vendors, as the PDF standard allows code fragments to be executed when PDF documents are opened.

If you choose to enable these features, a second dialog box may appear, cautioning you that additional commands are about to be executed. The identified vulnerability lies in the default option ("Open") presented to customers, which could potentially lead to executing untrusted code and adverse consequences if selected.

We are actively working on a fix for this issue, which we anticipate will be included in the 2024.3 update. We want to assure you that your security and safety are our top priorities, and we are committed to providing you with a secure and reliable experience with our products.
Please note that this dialog box has always been a part of the application, and the default option to maximize security is being worked on for a future update. In the meantime, we recommend selecting the "NO" option if you encounter this dialog box to ensure your security remains protected. It is also recommend that you never execute embedded code from untrusted sources, regardless of the software product.

If you have any further questions or concerns regarding this matter, please do not hesitate to reach out to our support team for assistance.

The Status Page Aggregator Built for IT Teams

With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.

Start free trial

No credit card required · Cancel anytime · 4522 services available

Integrations with Slack Microsoft Teams Google Chat Datadog PagerDuty Zapier Discord Webhook