KLA10164 DoS vulnerability in Foxit Reader

Improper string handling was found in Foxit Reader. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF file.

Original advisories

Related products

Foxit-Reader

CVE list

CVE-2009-0690 critical

Solution

Update to latest version

Foxit PDF Reader

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Foxit Reader 3.0 builds 1506 and earlier