Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0836
HistoryMar 10, 2009 - 8:30 p.m.

CVE-2009-0836

2009-03-1020:30:06
CWE-119
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.067 Low

EPSS

Percentile

93.9%

JSON

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the β€œOpen/Execute a file” action.

Affected configurations

NVD
Node
foxitsoftwarereaderMatch2.3
OR
foxitsoftwarereaderMatch3.0

Related

prion 2
cve 2
canvas 1
cvelist 2
checkpoint_advisories 1
nvd 1
coresecurity 1
seebug 1
nessus 1
openvas 2
prion
prion
Design/Logic Flaw
2009-03-10 20:30:00
Sql injection
2010-04-05 15:30:00
cve
cve
CVE-2009-0836
2009-03-10 20:30:06
CVE-2010-1239
2022-10-03 16:20:59
canvas
canvas
Immunity Canvas: FOXITLAUNCHIT
2009-03-10 20:30:00
cvelist
cvelist
CVE-2009-0836
2009-03-10 20:00:00
CVE-2010-1239
2022-10-03 16:20:59
checkpoint_advisories
checkpoint_advisories
Multiple PDF products Launch Action Command Code Execution (APSB10-15; CVE-2009-0836; CVE-2010-1240)
2010-06-30 00:00:00
nvd
nvd
CVE-2010-1239
2010-04-05 15:30:01
coresecurity
coresecurity
Foxit Reader Multiple Vulnerabilities
2009-03-09 00:00:00
seebug
seebug
Foxit Reader PDFζ–‡δ»Άε€„η†ε€šδΈͺδ»£η ζ‰§θ‘Œε’Œη»•θΏ‡ζŽˆζƒζΌζ΄ž
2009-03-11 00:00:00
nessus
nessus
Foxit Reader 2.x < 2.3 Build 3902 / 3.x < 3.0 Build 1506 Multiple Vulnerabilities
2009-03-09 00:00:00
openvas
openvas
Foxit Reader Multiple Vulnerabilities Mar-09
2009-03-17 00:00:00
Foxit Reader Multiple Vulnerabilities (Mar 2009)
2009-03-17 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.067 Low

EPSS

Percentile

93.9%

JSON
Related for NVD:CVE-2009-0836
prion2cve2canvas1cvelist2checkpoint_advisories1nvd1coresecurity1seebug1nessus1openvas2