Foxit Reader 5.3.1.0606 DLL Hijack

Exploit Title: foxit reader 5.3.1dwmapi.dll DLL Hijacking Exploit Date: 2012-08-23 Author: coolkaveh [email protected] Greets To Mohammad Morteza Sanaie [email protected] Https://twitter.com/coolkaveh Vendor Homepage: http://www.foxitsoftware.com/ Version: 5.3.1.0606 Tested on:...

PT-2012-5339

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 5.3 Description The issue allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment. This is triggered by the calculation of a negative number during the processing of cross...

CVE-2012-4337: Undefined Security Weakness

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

Vulnerability in Foxit Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Foxit Reader software version 5.1.4.0104 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Foxit...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Foxit Reader 3.0 - Open Execute Action Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Foxit Reader 内存破坏任意代码执行漏洞

BUGTRAQ ID: 50947 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader在处理畸形的文件时存在数组越界访问内存破坏漏洞，远程攻击者可利用特制的PDF文件引诱用户加载后，触发内存破坏漏洞，造成在目标系统上执行任意代码。 Foxit Foxit Reader 5.1.0.1021 Foxit Foxit Reader 5.0.2.0718 Foxit Foxit Reader 5.0.1.0523 厂商补丁： Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Foxit Reader < 5.1.3.1201 Memory Corruption RCE

The version of Foxit Reader installed on the remote Windows host is prior to 5.1.3.1201. It is, therefore, affected by a memory corruption issue due to a cross-border assignment of an array when opening a specially crafted PDF file. An attacker can exploit this, by tricking a user into opening a...

CVE-2011-3691

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

CVE-2011-3691

Foxit Reader before 5.0.2.0718 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing Trojan horse DLLs (dwmapi.dll, dwrite.dll, or msdrm.dll) in the current working directory. Multiple sources (NVD, Red Hat, CVE listing, and Nessus plugin) cor...

CVE-2011-3691

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

CVE-2011-3691: Untrusted Search Path

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory...

PT-2011-4581

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 5.0.2.0718 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory. It can also be exploited to cause a heap-based buff...

Foxit Reader < 5.0.2.0718 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 5.0.2.0718. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in how dynamic-link library DLL files are located and loaded, specifically files dwmapi.dll, dwrite.dll, and msdrm.dll. The application...

Foxit Reader ActiveX Control Buffer Overflow and Insecure Library Loading Vulnerabilities

Two vulnerabilities have been discovered in Foxit Reader, which can be exploited by malicious people to compromise a user's system. 1 A boundary error in the FoxitReaderOCX ActiveX control when processing the "OpenFile" method can be exploited to cause a heap-based buffer overflow via an overly...

Foxit Reader Insecure Library Loading

Vulnerability title: Foxit Reader Insecure Library Loading CVSS Risk Rating: 2.9 Low Product: Foxit Reader Application Vendor: Foxit Vendor URL: http://www.foxitsoftware.com Public disclosure date: 7/21/2011 Discovered by: Jose Hernandez and Solutionary Engineering Research Team SERT Solutionary...

Foxit Reader Freetype Engine Integer Overflow Vulnerability

The host is installed with Foxit Reader and is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodfoxitreaderfreetypeengineintoverflowvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Foxit Reader Freetype Engine Integer Overflow Vulnerability Authors: Shashi Kiran N...