Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

This module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user...

Foxit Reader Authorization Bypass

This module exploits an authorization bypass vulnerability in Foxit Reader build 1120. When an attacker creates a specially crafted pdf file containing an Open/Execute action, arbitrary commands can be executed without confirmation from the victim. Module Options msf use...

FoxIT Reader multiple security vulnerabilities

Uninitialized pointer dereference on PDF JBIG2 dictionary parsing, code execution, buffer overflow...

Foxit Reader buffer overflow vulnerability

Overview Foxit Reader contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description Foxit Reader is a PDF reader that is available on multiple operating systems.From the Secuia Research advisory Foxit Reader "util.printf" Buffer Overflow: S ecunia...

Foxit Reader util.printf()函数远程栈溢出漏洞

BUGTRAQ ID: 29288 CVECAN ID: CVE-2008-1104 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader的util.printf函数在解析包含有浮点标识符的格式字符串时存在栈溢出漏洞，如果用户受骗打开了特制的PDF文件的话，就可以触发这个溢出，导致执行任意代码。 Foxit Reader 2.3 build 2825 Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.foxitsoft.com/wac/serverintro.php...

Stack overflow

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...

Immunity Canvas: FOXIT_PRINTF

Name| foxitprintf ---|--- CVE| CVE-2008-1104 Exploit Pack| CANVAS Description| Foxit Reader - util.printf Javascript Overflow Notes| CVE Name: CVE-2008-1104 VENDOR: Foxit Software VersionsAffected: 2.3.2825 Repeatability: Infinite CVS URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1104...

CVE-2008-1104

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...

CVE-2008-1104

Foxit Reader

CVE-2008-1104

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...

CVE-2008-1104: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...

Foxit Reader buffer overflow

util.printf JavaScript function buffer overflow...

Foxit Reader Detection

Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/09/17"; scriptxrefname:"IAVT", value:"0001-T-0605";...

Secunia Research: Foxit Reader "util.printf()" Buffer Overflow

====================================================================== Secunia Research 20/05/2008 - Foxit Reader "util.printf" Buffer Overflow - ====================================================================== Table of Contents Affected...

Foxit Reader < 2.3 Build 2923 util.printf() Floating Point Specifier RCE

The version of Foxit Reader installed on the remote Windows host is prior to 2.3 Build 2923. It is, therefore, affected by a boundary error that is triggered when parsing format strings containing a floating point specifier in the util.printf JavaScript function. An attacker can exploit this issu...

CVE-2008-1942

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

Memory corruption

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

CVE-2008-1942

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

CVE-2008-1942

Foxit Reader 2.2 is affected by CVE-2008-1942. The vulnerability arises when processing a PDF containing (1) a malformed ExtGState resource with a /Font resource or (2) an XObject resource with a Rotate setting, leading to memory corruption that can cause a crash and may allow arbitrary code exec...

Foxit Reader PDF文件解析内存破坏漏洞

BUGTRAQ ID: 28890 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader处理包含有畸形/XObject资源的网页时存在漏洞，用户在处理恶意文件时会导致Foxit Reader崩溃。 当使用Foxit Reader旋转包含有畸形/XObject资源的网页时（或向页面添加了/Rotate字段）： 4 0 obj /Type /Page /Parent 3 0 R /Rotate 170 /Contents 25 0 R /Resources /ProcSet /PDF /Text /ImageB /ImageC /XObject /Im2...