Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	43785
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 06 2010 12:00AM
Updated:	Nov 15 2010 09:56AM
Credit:	Reported by the vendor
Vulnerable:	Foxit Foxit Reader 4.1.1.805 Foxit Foxit Reader 3.3.1.0518
Not Vulnerable:	Foxit Foxit Reader 4.2.0.0928

Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

Foxit Reader and Phantom are prone to a remote stack-based buffer-overflow vulnerability because the applications fail to perform adequate boundary-checks on user-supplied data.

An attacker can exploit this issue by enticing a user to open a malicious PDF file.

Successful exploits may allow the attacker to execute arbitrary code or commands in the context of a user running the affected applications.

Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

The following proof-of-concept and exploit are available:

• /data/vulnerabilities/exploits/43785.pdf
• /data/vulnerabilities/exploits/43785.py

Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

References:

• Foxit Reader Homepage (Foxit )
  
• Foxit Reader Security Bulletins (Foxit Reader)
  
• Collisions in PDF Signatures (Florian Zumbiehl)