4 matches found
CVE-2010-20010: Stack-based Buffer Overflow
Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler SEH chain, and lead to arbitrary code execution in t...
8.4CVSS6.3AI score0.00342EPSS
SaveExploits1References1
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection such that an attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization, there is no validation performed and the user provided path is used...
9.8CVSS7.7AI score0.03014EPSS
SaveExploits2References2
20