CVE-2012-4337

Foxit Reader is affected: pre-5.3 on Windows XP/7 allows remote code execution via a crafted PDF that triggers negative-number calculation during cross-reference processing. The root cause is memory corruption during PDF parsing, leading to arbitrary code execution with the caller’s privileges. A...

Foxit Reader 5.3.1.0606 DLL Hijack

Exploit Title: foxit reader 5.3.1dwmapi.dll DLL Hijacking Exploit Date: 2012-08-23 Author: coolkaveh [email protected] Greets To Mohammad Morteza Sanaie [email protected] Https://twitter.com/coolkaveh Vendor Homepage: http://www.foxitsoftware.com/ Version: 5.3.1.0606 Tested on:...

Vulnerability in Foxit Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Foxit Reader software version 5.1.4.0104 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Foxit...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Foxit Reader 3.0 - Open Execute Action Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

This module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user. Th...

Foxit Reader 内存破坏任意代码执行漏洞

BUGTRAQ ID: 50947 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader在处理畸形的文件时存在数组越界访问内存破坏漏洞，远程攻击者可利用特制的PDF文件引诱用户加载后，触发内存破坏漏洞，造成在目标系统上执行任意代码。 Foxit Foxit Reader 5.1.0.1021 Foxit Foxit Reader 5.0.2.0718 Foxit Foxit Reader 5.0.1.0523 厂商补丁： Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Foxit Reader < 5.1.3.1201 Memory Corruption RCE

The version of Foxit Reader installed on the remote Windows host is prior to 5.1.3.1201. It is, therefore, affected by a memory corruption issue due to a cross-border assignment of an array when opening a specially crafted PDF file. An attacker can exploit this, by tricking a user into opening a...

CVE-2011-3691

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

CVE-2011-3691

Foxit Reader before 5.0.2.0718 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing Trojan horse DLLs (dwmapi.dll, dwrite.dll, or msdrm.dll) in the current working directory. Multiple sources (NVD, Red Hat, CVE listing, and Nessus plugin) cor...

CVE-2011-3691

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

Foxit Reader < 5.0.2.0718 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 5.0.2.0718. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in how dynamic-link library DLL files are located and loaded, specifically files dwmapi.dll, dwrite.dll, and msdrm.dll. The application...

Foxit Reader ActiveX Control Buffer Overflow and Insecure Library Loading Vulnerabilities

Two vulnerabilities have been discovered in Foxit Reader, which can be exploited by malicious people to compromise a user's system. 1 A boundary error in the FoxitReaderOCX ActiveX control when processing the "OpenFile" method can be exploited to cause a heap-based buffer overflow via an overly...

Foxit Reader Insecure Library Loading

Vulnerability title: Foxit Reader Insecure Library Loading CVSS Risk Rating: 2.9 Low Product: Foxit Reader Application Vendor: Foxit Vendor URL: http://www.foxitsoftware.com Public disclosure date: 7/21/2011 Discovered by: Jose Hernandez and Solutionary Engineering Research Team SERT Solutionary...

Foxit Reader Freetype Engine Integer Overflow Vulnerability

Foxit Reader is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Foxit Reader Freetype Engine Integer Overflow Vulnerability

The host is installed with Foxit Reader and is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodfoxitreaderfreetypeengineintoverflowvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Foxit Reader Freetype Engine Integer Overflow Vulnerability Authors: Shashi Kiran N...

Foxit Reader Freetype Engine remote integer overflow vulnerability-vulnerability warning-the black bar safety net

Release date: 2011-06-21 Update date: 2011-06-21 Affected system: Foxit Foxit Reader 4. x Foxit Foxit Reader 3. x Foxit Foxit Reader 2. x Not affected system: Foxit Foxit Reader 4.0.0.0619 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 4 ...