Secunia Research: Foxit Reader "util.printf()" Buffer Overflow

====================================================================== Secunia Research 20/05/2008 - Foxit Reader "util.printf" Buffer Overflow - ====================================================================== Table of Contents Affected...

Foxit Reader Detection

Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/09"; scriptxrefname:"IAVT", value:"0001-T-0605";...

Foxit Reader < 2.3 Build 2923 util.printf() Floating Point Specifier RCE

The version of Foxit Reader installed on the remote Windows host is prior to 2.3 Build 2923. It is, therefore, affected by a boundary error that is triggered when parsing format strings containing a floating point specifier in the util.printf JavaScript function. An attacker can exploit this issu...

Memory corruption

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

CVE-2008-1942

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

CVE-2008-1942

Foxit Reader 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PDF file with 1 a malformed ExtGState resource containing a /Font resource, or 2 an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probabl...

CVE-2008-1942

Foxit Reader 2.2 is affected by CVE-2008-1942. The vulnerability arises when processing a PDF containing (1) a malformed ExtGState resource with a /Font resource or (2) an XObject resource with a Rotate setting, leading to memory corruption that can cause a crash and may allow arbitrary code exec...

Foxit Reader PDF文件解析内存破坏漏洞

BUGTRAQ ID: 28890 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader处理包含有畸形/XObject资源的网页时存在漏洞，用户在处理恶意文件时会导致Foxit Reader崩溃。 当使用Foxit Reader旋转包含有畸形/XObject资源的网页时（或向页面添加了/Rotate字段）： 4 0 obj /Type /Page /Parent 3 0 R /Rotate 170 /Contents 25 0 R /Resources /ProcSet /PDF /Text /ImageB /ImageC /XObject /Im2...

Foxit Reader 2.2 two potentially exploitable bugs

Hi all, I would like to post here some problems that i found in Foxit Reader 2.2 software. I sent to the company support two depthly detailed descriptions about these bugs with both pdfs causing them. The answer from the company was: "Hello. Both Foxit Reader and Adobe Reader cannot open the file...

FoxIt Reader multiple security vulnerabilities

Memory corruptions on PDF parsing...

CVE-2007-2186

Foxit Reader 2.0 allows remote attackers to cause a denial of service application crash via a crafted PDF document...

Design/Logic Flaw

Foxit Reader 2.0 allows remote attackers to cause a denial of service application crash via a crafted PDF document...

EUVD-2007-2181

Foxit Reader 2.0 allows remote attackers to cause a denial of service application crash via a crafted PDF document...

CVE-2007-2186

Technical details are not publicly available in the provided documents for CVE-2007-2186. Monitor for updates.

CVE-2007-2186

Foxit Reader 2.0 allows remote attackers to cause a denial of service application crash via a crafted PDF document...

Foxit Reader畸形PDF文件拒绝服务漏洞

Foxit Reader是一款PDF文档阅读软件。 Foxit Reader处理畸形PDF文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者可以通过构建包含恶意PDF文件的WEB页，诱使用户通过Opera或者Internet exploer访问而使应用程序崩溃。 Foxit 2.0 目前没有解决方案提供： http://www.foxitsoftware.com/pdf/rdintro.php / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for...

Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit

No description provided by source. / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for Windows Remote dos exploit created by n00b Foxit pdf viewer is prone to a dos exploit by opening a malformed pdf document it is possible...

Foxit Reader 2.0 - PDF Remote Denial of Service

Foxit Reader 2.0 - PDF Remote Denial of Service / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for Windows Remote dos exploit created by n00b Foxit pdf viewer is prone to a dos exploit by opening a malformed pdf document it is possible to crash foxit reader whic...

Foxit Reader 2.0 - 'PDF' Remote Denial of Service

/ Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2.0 for Windows Remote dos exploit created by n00b Foxit pdf viewer is prone to a dos exploit by opening a malformed pdf document it is possible to crash foxit reader which could cause the vic to lose any unsaved...

Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================= Foxit Reader 2.0 PDF Remote Denial of Service Exploit ======================================================= / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2....