Foxit Reader Freetype引擎远程整数溢出漏洞

Bugtraq ID: 48359
CVE ID：CVE-2011-1908

Foxit Reader是一款流行的处理PDF文件的应用程序。
Foxit Reader处理某些非法字体类型存在可利用漏洞，攻击者可以利用这个漏洞使Foxit Reader非正常退出，允许攻击者执行任意代码。

Foxit Foxit Reader 3.2.1 0401
Foxit Foxit Reader 3.2 0303
Foxit Foxit Reader 3.0.2009 .1301
Foxit Foxit Reader 4.0
Foxit Foxit Reader 3.3.1.0518
Foxit Foxit Reader 3.2
Foxit Foxit Reader 3.1.4.1125
Foxit Foxit Reader 3.0 Build 1817
Foxit Foxit Reader 3.0 Build 1506
Foxit Foxit Reader 3.0
Foxit Foxit Reader 2.3 Build 3902
Foxit Foxit Reader 2.3 build 2923
Foxit Foxit Reader 2.3 build 2825
Foxit Foxit Reader 2.3
Foxit Foxit Reader 2.2
厂商解决方案
Foxit Reader 4.0.0.0619已经修复此漏洞，建议用户下载使用：
http://www.foxitsoftware.com/pdf/reader/