Foxit Reader 3.2.1.0401 - Denial of Service

Title: Foxit Reader = 3.2.1.0401 Denial Of Service Exploit Date: 05/04/10 Author: juza - iamjuzaatgmaildotcom Software Link: http://www.foxitsoftware.com/pdf/reader/ Version: All versions = 3.2.1.0401 have the same issue Tested on: Windows XP SP3 x32 Description: Just open the pdf and click in th...

CVE-2010-1239

Foxit Reader before 3.2.1.0401 allows remote attackers to 1 execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and 2 execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836...

Sql injection

Foxit Reader before 3.2.1.0401 allows remote attackers to 1 execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and 2 execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836...

CVE-2010-1239

Foxit Reader vulnerable to arbitrary code execution via crafted PDFs (two launch-action vectors). Affected: Foxit Reader before 3.2.1.0401. Root cause: PDF Open/Launch actions not properly restricted, enabling remote execution of programs (local or embedded). Impact: remote attacker could run arb...

CVE-2010-1239

Foxit Reader before 3.2.1.0401 allows remote attackers to 1 execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and 2 execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836...

Foxit Reader 3.2 执行内嵌可执行程序漏洞

BUGTRAQ ID: 39109 Foxit Reader是一款小型的PDF文档查看器和打印程序。 出于安全考虑Foxit Reader、Adobe Reader等阅读器不允许执行PDF文档中内嵌的可执行程序（如二进制程序和脚本），但攻击者可以使用特殊技术绕过这种安全机制启动命令（/Launch /Action），最终执行内嵌的可执行程序。Adobe Reader在打开这种PDF文档时会弹出安全提示对话框，而Foxit Reader不会给出任何提示。 Foxit Reader 3.2 厂商补丁： Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Foxit Reader vulnerable to arbitrary command execution

Overview Foxit Reader contains a vulnerability that may allow an attacker to execute arbitrary commands without requiring user interaction. Description Foxit Reader is software designed to view Portable Document Format PDF files. The Adobe PDF Reference supports a "Launch action" that "... launch...

Foxit Reader < 3.2.1 Arbitrary Program Execution

The version of Foxit Reader installed on the remote Windows host is prior to 3.2.1. It is, therefore, affected by an arbitrary program execution vulnerability related to certain '/Type /Action /S /Launch' or '/Launch /Action' sequences. An attacker can exploit these, by tricking a user into openi...

Adobe Reader - Escape From .PDF Execute Embedded Executable

Adobe Reader - Escape From .PDF Execute Embedded Executable Title : Escape From PDF Author : Didier Stevens Date : 03/29/2010 Source : http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ This is a special PDF hack: I managed to make a PoC PDF to execute an embedded executable without...

Adobe Reader - Escape From '.PDF' Execute Embedded Executable

Title : Escape From PDF Author : Didier Stevens Date : 03/29/2010 Source : http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ This is a special PDF hack: I managed to make a PoC PDF to execute an embedded executable without exploiting any vulnerability! I use a launch action triggered by t...

Hacker Finds a Way to Exploit PDF Files, Without Vulnerability

SEE: Updated report with response from Adobe and FoxIt Software A security researcher has managed to create a proof-of-concept PDF file that executes an embedded executable without exploiting any security vulnerabilities. The PDF hack, when combined with clever social engineering techniques, coul...

Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow (PoC)

Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow PoC Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile = "C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx" prototype = "Function OpenFile ByVal strFilePath As String As Boolean"...

Foxit Reader v3.1.4.1125 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== Foxit Reader v3.1.4.1125 ActiveX Heap Overflow PoC ================================================== Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile...

Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow (PoC)

Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile = "C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx" prototype = "Function OpenFile ByVal strFilePath As String As Boolean" memberName = "OpenFile" progid =...

Foxit Reader 4.1.1 Stack Overflow Exploit

Exploit for windows platform in category local exploits ========================================= Foxit Reader 4.1.1 Stack Overflow Exploit ========================================= Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Software Link :...

Foxit Reader Firefox Plugin Reloading RCE

According to its version, the Foxit Reader installed on the remote Windows host is affected by an memory corruption issue related to the Firefox plugin npFoxitReaderPlugin.dll. An unauthenticated, remote attacker can exploit this to execute arbitrary code, by tricking a user into loading a...

Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability

No description provided by source. Bugtraq ID: 36673 Published: Oct 14 2009 12:00AM Updated: Nov 19 2009 03:25PM Credit: mrx Vulnerable: Foxit Reader 3.1.1 Build 0928 Foxit Foxit Reader 3.0.2009 1301 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 1506 Foxit Foxit Reader 3.0 Foxit...

Foxit Reader - COM Objects Memory Corruption Remote Code Execution

Foxit Reader - COM Objects Memory Corruption Remote Code Execution Bugtraq ID: 36673 Published: Oct 14 2009 12:00AM Updated: Nov 19 2009 03:25PM Credit: mrx Vulnerable: Foxit Reader 3.1.1 Build 0928 Foxit Foxit Reader 3.0.2009 1301 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 15...

Foxit Reader COM Objects Memory Corruption Remote Code Execution

Exploit for unknown platform in category dos / poc ============================================================================== Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability ============================================================================== Title:...

Foxit Reader - COM Objects Memory Corruption Remote Code Execution

Bugtraq ID: 36673 Published: Oct 14 2009 12:00AM Updated: Nov 19 2009 03:25PM Credit: mrx Vulnerable: Foxit Reader 3.1.1 Build 0928 Foxit Foxit Reader 3.0.2009 1301 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 1506 Foxit Foxit Reader 3.0 Foxit Reader is prone to a remote...