SRC-2018-0010 : Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability

Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability Foxit vulnerability allows remote attackers to execute arbitrary code on installations User interaction required to exploit in visiting a malicious page or opening a malicious file specific flaw exists within parsing of embedded U3D images inside PDF files issue results from lack of proper validation of length of user-supplied data prior to copying it to a fixed-length, heap-based buffer attacker can leverage this vulnerability to execute code under the context of the current process Affected Vendors: Foxit Affected Products: Foxit Reader and Foxit PhantomPDF Foxit has issued an update to correct these vulnerabilities More details can be found at: https://www.foxitsoftware.com/support/security-bulletins.php