CVE-2008-1104

Related Files

secunia-foxit.txt

Posted May 20, 2008

Authored by Dyon Balding | Site secunia.com

Secunia Research has discovered a vulnerability in Foxit Reader, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when parsing format strings containing a floating point specifier in the "util.printf()" JavaScript function. This can be exploited to cause a stack-based buffer overflow via a specially crafted PDF file. Successful exploitation allows execution of arbitrary code. Foxit Reader 2.3 build 2825 is affected.

tags | advisory, overflow, arbitrary, javascript

advisories | CVE-2008-1104

SHA-256 | fd57e4bfb41939ad032f32cc8e3df6d5f80854b91d50488e0adfd932f788576e

Download | Favorite | View