CVE:CVE-2021-45979
CNNVD:CNNVD-202201-151
Foxit PDF Reader是中国福昕（Foxit）公司的一款PDF阅读器。
Foxit PDF Reader和PDF Editor存在操作系统命令注入漏洞，该漏洞源于macOS上11.1之前的Foxit PDF Reader和PDF Editor允许远程攻击者利用该漏洞在JavaScript API中通过app.launchURL执行任意代码。
solution:Upgrade foxit pdf_editor to a higher version than 11.1,and avoid the version (,11.1); Upgrade foxit pdf_reader to a higher version than 11.1,and avoid the version (,11.1)