Lucene search
K

CVE-2009-0837

🗓️ 10 Mar 2009 20:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 86 Views🌐 WEB

Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2009-0837
13 Mar 200900:00
circl
Core Security
Foxit Reader Multiple Vulnerabilities
9 Mar 200900:00
coresecurity
Check Point Advisories
Foxit Reader PDF Files Processing Buffer Overflow (CVE-2009-0837)
9 Nov 201400:00
checkpoint_advisories
Cvelist
CVE-2009-0837
10 Mar 200920:00
cvelist
canvas
Immunity Canvas: FOXIT_ACTION
10 Mar 200920:30
canvas
Tenable Nessus
Foxit Reader 2.x < 2.3 Build 3902 / 3.x < 3.0 Build 1506 Multiple Vulnerabilities
9 Mar 200900:00
nessus
NVD
CVE-2009-0837
10 Mar 200920:30
nvd
OpenVAS
Foxit Reader Multiple Vulnerabilities (Mar 2009)
17 Mar 200900:00
openvas
OpenVAS
Foxit Reader Multiple Vulnerabilities Mar-09
17 Mar 200900:00
openvas
Prion
Stack overflow
10 Mar 200920:30
prion
Rows per page
NVD
ParameterPositionPathDescriptionCWE
filenamepathfoxitsoftware.com/downloads/Long filename parameter in Open/Execute a file action may trigger overflow in Foxit Reader.CWE-119
filenamenestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-authorization-bypass.pdfPoC PDF demonstrating code execution/authorization bypass related to the Open/Execute a file action.CWE-119
actionnestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-authorization-bypass.pdfPoC PDF demonstrating code execution/authorization bypass related to the Open/Execute a file action.CWE-119
Open/Execute a filenestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-authorization-bypass.pdfPoC PDF demonstrating code execution/authorization bypass related to the Open/Execute a file action.CWE-119
filenamenestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-BOF.pdfPoC PDF demonstrating buffer overflow via long filename in Foxit Reader Open/Execute a file action.CWE-119
actionnestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-BOF.pdfPoC PDF demonstrating buffer overflow via long filename in Foxit Reader Open/Execute a file action.CWE-119
Open/Execute a filenestedcoresecurity.com/files/attachments/CORE-2009-0218-PoC-BOF.pdfPoC PDF demonstrating buffer overflow via long filename in Foxit Reader Open/Execute a file action.CWE-119
Open/Execute a filepathfoxitsoftware.com/pdf/reader/security.htmVendor security advisory page referencing Foxit Reader vulnerabilities including Open/Execute a file issue.CWE-119
filenamepathfoxitsoftware.com/pdf/reader/security.htmVendor security advisory page referencing Foxit Reader vulnerabilities including Open/Execute a file issue.CWE-119

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:05Current
8.1High risk
Vulners AI Score8.1
CVSS 210
EPSS0.75781
86