Foxit Reader Multiple Remote Memory Corruption Vulnerabilities

Bugtraq ID:	28890
Class:	Design Error
CVE:	CVE-2008-1942
Remote:	Yes
Local:	No
Published:	Apr 22 2008 12:00AM
Updated:	Nov 04 2008 08:05PM
Credit:	Javier Vicente Vallejo
Vulnerable:	Foxit Foxit Reader 2.2
Not Vulnerable:

Foxit Reader Multiple Remote Memory Corruption Vulnerabilities

Foxit Reader is prone to two remote memory-corruption vulnerabilities because it fails to handle specially crafted PDF files.

Remote attackers may be able to execute code, but this has not been confirmed. Failed exploit attempts will crash the application, denying service to legitimate users.

Foxit Reader 2.2 is vulnerable; other versions may also be affected.

Foxit Reader Multiple Remote Memory Corruption Vulnerabilities

Attackers exploit this issue by enticing users to open malicious PDF files with the affected application.

Proof-of-concept PDF content is available in the referenced advisories.

Foxit Reader Multiple Remote Memory Corruption Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Foxit Reader Multiple Remote Memory Corruption Vulnerabilities

References:

• Foxit Reader Homepage (Foxit )
  
• Foxit Reader 2.2 vulnerability opening malformed pdf (Javier Vicente Vallejo)
  
• Foxit Reader 2.2 vulnerability opening malformed pdf (Javier Vicente Vallejo)