Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
BID:36673
Info
Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
| Bugtraq ID: | 36673 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2009 12:00AM |
| Updated: | Nov 19 2009 03:25PM |
| Credit: | mrx |
| Vulnerable: |
Foxit Reader 3.1.1 Build 0928 Foxit Foxit Reader 3.0.2009 .1301 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 1506 Foxit Foxit Reader 3.0 |
| Not Vulnerable: | |
Discussion
Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
Foxit Reader is prone to a remote code-execution vulnerability because is fails to properly handle certain COM objects.
An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.
Foxit Reader is prone to a remote code-execution vulnerability because is fails to properly handle certain COM objects.
An attacker can exploit this issue by supplying a malicious PDF file or webpage. Successful exploits may allow the attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.
Exploit / POC
Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage or opening a specially crafted PDF file.
The following proof-of-concept files are available:
To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage or opening a specially crafted PDF file.
The following proof-of-concept files are available:
Solution / Fix
Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
Solution:
The vendor has released fixes. Please contact the vendor for details.
Solution:
The vendor has released fixes. Please contact the vendor for details.
References
Foxit Reader COM Objects Memory Corruption Remote Code Execution Vulnerability
References:
References: