Lucene search

K
cveMitreCVE-2012-4337
HistoryAug 23, 2012 - 3:55 p.m.

CVE-2012-4337

2012-08-2315:55:00
mitre
web.nvd.nist.gov
26
foxit reader
vulnerability
remote code execution
pdf
nvd
cve-2012-4337

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.049

Percentile

92.9%

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.

Affected configurations

Nvd
Node
foxitsoftwarefoxit_readerRange≀5.1.4.0104
OR
foxitsoftwarefoxit_readerMatch2.0
OR
foxitsoftwarefoxit_readerMatch2.3
OR
foxitsoftwarefoxit_readerMatch3.0
OR
foxitsoftwarefoxit_readerMatch3.1.2.1013
OR
foxitsoftwarefoxit_readerMatch3.1.2.1030
OR
foxitsoftwarefoxit_readerMatch3.2.0.0303
OR
foxitsoftwarefoxit_readerMatch3.2.1.0401
OR
foxitsoftwarefoxit_readerMatch4.0
OR
foxitsoftwarefoxit_readerMatch4.0.0.0619
OR
foxitsoftwarefoxit_readerMatch4.1
OR
foxitsoftwarefoxit_readerMatch4.1.1.0805
OR
foxitsoftwarefoxit_readerMatch4.2
OR
foxitsoftwarefoxit_readerMatch4.3
OR
foxitsoftwarefoxit_readerMatch4.3.1.0218
OR
foxitsoftwarefoxit_readerMatch5.0
OR
foxitsoftwarefoxit_readerMatch5.0.2
OR
foxitsoftwarefoxit_readerMatch5.1.0.1021
OR
foxitsoftwarefoxit_readerMatch5.1.3
AND
microsoftwindows_7
OR
microsoftwindows_xp
VendorProductVersionCPE
foxitsoftwarefoxit_reader*cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader2.0cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader2.3cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader3.0cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader3.1.2.1013cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1013:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader3.1.2.1030cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1030:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader3.2.0.0303cpe:2.3:a:foxitsoftware:foxit_reader:3.2.0.0303:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader3.2.1.0401cpe:2.3:a:foxitsoftware:foxit_reader:3.2.1.0401:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader4.0cpe:2.3:a:foxitsoftware:foxit_reader:4.0:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader4.0.0.0619cpe:2.3:a:foxitsoftware:foxit_reader:4.0.0.0619:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.049

Percentile

92.9%