5464 matches found
Stack overflow
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long 1 relative path or 2 absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action...
Design/Logic Flaw
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as...
Memory corruption
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized...
CVE-2009-0836
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as...
CVE-2009-0191
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized...
CVE-2009-0836
Foxit Reader contains a remote code execution vulnerability (CVE-2009-0836) in which a crafted PDF can trigger an Open/Execute action without user confirmation. Affected products/versions include Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506 (including 1120 and 1301). The issue ari...
CVE-2009-0837
Foxit Reader 3.0 before build 1506 (including 1120 and 1301) is affected by a stack-based buffer overflow when processing an Open/Execute a file action, where a long or specially crafted filename argument can overflow a stack buffer and enable arbitrary code execution. The vulnerability compounds...
CVE-2009-0191
Foxit Reader is vulnerable to remote code execution via a crafted PDF due to a JBIG2 symbol dictionary processing error (zero new symbols). Affected versions are Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506 (including 3.0.2009.1301). The issue can cause a dereference of uninitiali...
CVE-2009-0837
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long 1 relative path or 2 absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action...
Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability
====================================================================== Secunia Research 09/03/2009 - Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability - ====================================================================== Table of Contents Affected...
Foxit Reader PDF Handling Multiple Remote Vulnerabilities
Description Foxit Reader is prone to multiple remote vulnerabilities, Attackers may leverage these issues to execute arbitrary code in the context of the application. Successful exploits may compromise the application and the underlying computer. Failed attacks will cause denial-of-service...
Foxit Reader Authorization Bypass
This module exploits an authorization bypass vulnerability in Foxit Reader build 1120. When an attacker creates a specially crafted pdf file containing an Open/Execute action, arbitrary commands can be executed without confirmation from the victim. Module Options msf use...
FoxIT Reader multiple security vulnerabilities
Uninitialized pointer dereference on PDF JBIG2 dictionary parsing, code execution, buffer overflow...
Foxit Reader 2.x < 2.3 Build 3902 / 3.x < 3.0 Build 1506 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is 2.x prior to 2.3 Build 3902 or 3.x prior to 3.0 Build 1506. It is, therefore, affected by multiple vulnerabilities : - An uninitialized memory dereference flaw exists due to improper handling of a JBIG2 symbol dictionary segment...
Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow
This module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user...
Foxit Reader buffer overflow vulnerability
Overview Foxit Reader contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description Foxit Reader is a PDF reader that is available on multiple operating systems.From the Secuia Research advisory Foxit Reader "util.printf" Buffer Overflow: S ecunia...
Foxit Reader util.printf()函数远程栈溢出漏洞
BUGTRAQ ID: 29288 CVECAN ID: CVE-2008-1104 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader的util.printf函数在解析包含有浮点标识符的格式字符串时存在栈溢出漏洞，如果用户受骗打开了特制的PDF文件的话，就可以触发这个溢出，导致执行任意代码。 Foxit Reader 2.3 build 2825 Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.foxitsoft.com/wac/serverintro.php...
Immunity Canvas: FOXIT_PRINTF
Name| foxitprintf ---|--- CVE| CVE-2008-1104 Exploit Pack| CANVAS Description| Foxit Reader - util.printf Javascript Overflow Notes| CVE Name: CVE-2008-1104 VENDOR: Foxit Software VersionsAffected: 2.3.2825 Repeatability: Infinite CVS URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1104...
Stack overflow
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...
CVE-2008-1104
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings...