Foxit Reader Freetype Engine Remote Integer Overflow Vulnerabiliy

Bugtraq ID:	48359
Class:	Boundary Condition Error
CVE:	CVE-2011-1908
Remote:	Yes
Local:	No
Published:	Jun 21 2011 12:00AM
Updated:	Jun 21 2011 12:00AM
Credit:	David Seidman of Microsoft
Vulnerable:	Foxit Foxit Reader 3.2.1 0401 Foxit Foxit Reader 3.2 0303 Foxit Foxit Reader 3.0.2009 .1301 Foxit Foxit Reader 4.0 Foxit Foxit Reader 3.3.1.0518 Foxit Foxit Reader 3.2 Foxit Foxit Reader 3.1.4.1125 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 1506 Foxit Foxit Reader 3.0 Foxit Foxit Reader 2.3 Build 3902 Foxit Foxit Reader 2.3 build 2923 Foxit Foxit Reader 2.3 build 2825 Foxit Foxit Reader 2.3 Foxit Foxit Reader 2.2
Not Vulnerable:	Foxit Foxit Reader 4.0.0.0619

Foxit Reader Freetype Engine Remote Integer Overflow Vulnerabiliy

Foxit Reader is prone to a remote integer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Foxit Reader Freetype Engine Remote Integer Overflow Vulnerabiliy

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Foxit Reader Freetype Engine Remote Integer Overflow Vulnerabiliy

Solution:
Updates are available. Please see the references for more information.

Foxit Reader Freetype Engine Remote Integer Overflow Vulnerabiliy

References:

• Foxit Reader Homepage (Foxit )
  
• Microsoft Vulnerability Research Advisory MSVR11-005 (Microsft)
  
• Fixed a numerical overflow in the freetype engine. (Foxit)