Foxit Reader 5.4.4.1128 Firefox Plugin - 'npFoxitReaderPlugin.dll' Stack Buffer Overflow (PoC)

?php / Foxit Reader = 5.4.4.1128 Plugin for Firefox npFoxitReaderPlugin.dll Overlong Query String Remote Stack Buffer Overflow PoC --------------------------- rgod listener Tested against Microsoft Windows Mozilla Firefox 17.0.1 Foxit Reader 5.4.3.0920 Foxit Reader 5.4.4.1128 File:...

Foxit Reader Plugin URL Processing Buffer Overflow

This module exploits a vulnerability in the Foxit Reader Plugin, it exists in the npFoxitReaderPlugin.dll module. When loading PDF files from remote hosts, overly long query strings within URLs can cause a stack-based buffer overflow, which can be exploited to execute arbitrary code. This exploit...

Foxit Reader除零拒绝服务漏洞

BUGTRAQ ID: 55734 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader 5.4.3.0920及其他版本处理PDF文档时存在拒绝服务漏洞，可允许远程攻击者使受影响应用崩溃。 0 Foxit Reader 厂商补丁： Foxit ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.foxitsoft.com/wac/serverintro.php Title : Foxit Reader suffers from Division By Zero Versio...

Foxit Reader 5.4.3.0920 - Crash (PoC)

Foxit Reader 5.4.3.0920 - Crash PoC Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerabili...

Foxit Reader < 5.4.3 Trojan DLL Injection

The version of Foxit Reader installed on the remote Windows host is prior to 5.4.3. It is, therefore, affected by a flaw in how dynamic-link library DLL files are located and loaded, specifically file fxdecod1.dll. The application uses a fixed path to search for this file, and the path can includ...

Foxit Reader 5.4.3.0920 - Crash (PoC)

Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerability during the handling of the pdf...

Foxit Reader 5.x 'fxdecod1.dll' DLL装载任意代码执行漏洞

Bugtraq ID:55686 Foxit Reader是一款流行的处理PDF文件的应用程序。 Foxit Reader不安全装载fxdecod1.dll库，允许攻击者构建恶意PDF文件，存放在远程WebDAV或SMB共享，诱使用户打开，以应用程序上下文执行任意代码。 0 Foxit Reader 5.x 厂商解决方案 Foxit Reader 5.4.3已经修复此漏洞，建议用户下载使用： http://www.foxitsoftware.com/...

Foxit Reader < 5.3 Cross-References RCE

The version of Foxit Reader installed on the remote Windows host is prior to 5.3. It is, therefore, affected by a memory corruption issue due to the calculation of a negative number during the processing of cross-references. An attacker can exploit this, by tricking a user into opening a crafted...

Foxit Reader PDF File Handling Memory Corruption Vulnerability

The host is installed with Foxit Reader and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbfoxitreaderpdfmemcrptnvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Foxit Reader PDF File Handling Memory Corruption Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

Foxit Reader PDF File Handling Memory Corruption Vulnerability

Foxit Reader is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

Design/Logic Flaw

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2012-4759

CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...

CVE-2012-4759: Undefined Security Weakness

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

Foxit Foxit Reader 5.x 不明细节内存破坏漏洞

BUGTRAQ ID: 55150 CVE ID: CVE-2012-4337 Foxit Reader是一款小型的PDF文档查看器和打印程序。 Foxit Reader 5.1.4.0104及更早版本解析PDF文件的实现上存在安全漏洞，可被利用破坏内存，执行任意代码并控制用户系统。 0 Foxit Foxit Reader 5.x 厂商补丁： Foxit ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.foxitsoft.com/wac/serverintro.php...

Cross site scripting

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

CVE-2012-4337

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

CVE-2012-4337

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

CVE-2012-4337

Foxit Reader is affected: pre-5.3 on Windows XP/7 allows remote code execution via a crafted PDF that triggers negative-number calculation during cross-reference processing. The root cause is memory corruption during PDF parsing, leading to arbitrary code execution with the caller’s privileges. A...