CVE-2011-3691

Foxit Reader before 5.0.2.0718 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing Trojan horse DLLs (dwmapi.dll, dwrite.dll, or msdrm.dll) in the current working directory. Multiple sources (NVD, Red Hat, CVE listing, and Nessus plugin) cor...

CVE-2011-1908

CVE-2011-1908 is a Foxit Reader vulnerability: an integer overflow in the FreeType engine’s Type 1 font decoder allows remote code execution or a denial of service when processing a crafted font inside a PDF. The issue affects Foxit Reader prior to version 4.0.0.0619. Multiple sources corroborate...

CVE-2011-0332

CVE-2011-0332 affects Foxit Reader prior to 4.3.1.0218 and Foxit Phantom prior to 2.3.3.1112. The issue is an ICC parsing integer overflow that can trigger a heap-based buffer overflow via crafted ICC chunks in a PDF, enabling remote code execution. Multiple connected sources (NVD/NIST entry, Ope...