Foxit Reader PDF文件处理多个代码执行和绕过授权漏洞

BUGTRAQ ID: 34035 CVECAN ID: CVE-2009-0191,CVE-2009-0836,CVE-2009-0837 Foxit Reader是一款小型的PDF文档查看器和打印程序。 1 Foxit Reader在处理JBIG2符号字典段时存在错误，特制的PDF文件可能导致引用未经初始化的内存。 2 如果PDF文件中定义了Open/Execute a file操作，Foxit Reader可能会未经用户确认便打开或执行PDF文件创建者所定义的文件。 3 如果带有超长文件名参数的PDF文件中定义了Open/Execute a...

CVE-2009-0191

Foxit Reader is vulnerable to remote code execution via a crafted PDF due to a JBIG2 symbol dictionary processing error (zero new symbols). Affected versions are Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506 (including 3.0.2009.1301). The issue can cause a dereference of uninitiali...

Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability

====================================================================== Secunia Research 09/03/2009 - Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability - ====================================================================== Table of Contents Affected...