Big Faceless PDF Library Unspecified JavaScript Vulnerability

Bugtraq ID:	34002
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 05 2009 12:00AM
Updated:	Mar 05 2009 05:56PM
Credit:	Reported by the vendor
Vulnerable:	Big Faceless Organization Big Faceless PDF Library 2.11.3
Not Vulnerable:	Big Faceless Organization Big Faceless PDF Library 2.11.4

Big Faceless PDF Library Unspecified JavaScript Vulnerability

Big Faceless PDF Library is prone to an unspecified vulnerability that occurs when processing JavaScript.

Currently, very little is known about this issue. We will update this BID as more information emerges.

Versions prior to Big Faceless PDF Library 2.11.4 are vulnerable.

Big Faceless PDF Library Unspecified JavaScript Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Big Faceless PDF Library Unspecified JavaScript Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.


Big Faceless Organization Big Faceless PDF Library 2.11.3

• Big Faceless Organization bfopdf-2.11.4.zip
  http://big.faceless.org/products/postdownload.jsp?product=pdf&url=bfop df-2.11.4.zip

Big Faceless PDF Library Unspecified JavaScript Vulnerability

References:

• CHANGELOG for Big Faceless PDF library (Big Faceless Organization)
  
• Vendor Homepage (Big Faceless Organization.)