Foxit Reader Unspecified Memory Corruption Vulnerability

Bugtraq ID:	55150
Class:	Unknown
CVE:	CVE-2012-4337
Remote:	Yes
Local:	No
Published:	Aug 21 2012 12:00AM
Updated:	Aug 21 2012 12:00AM
Credit:	John Leitch, Microsoft.
Vulnerable:	Foxit Foxit Reader 3.2.1 0401 Foxit Foxit Reader 3.2 0303 Foxit Foxit Reader 3.0.2009 .1301 Foxit Foxit Reader 5.1.4.0104 Foxit Foxit Reader 5.1.3 Foxit Foxit Reader 5.0.2.0718 Foxit Foxit Reader 5.0.1.0523 Foxit Foxit Reader 4.3.1.0218 Foxit Foxit Reader 4.3.1.0118 Foxit Foxit Reader 4.2.0.0928 Foxit Foxit Reader 4.1.1.805 Foxit Foxit Reader 4.1.1.0218 Foxit Foxit Reader 4.0.0.0619 Foxit Foxit Reader 4.0 Foxit Foxit Reader 3.3.1.0518 Foxit Foxit Reader 3.2 Foxit Foxit Reader 3.1.4.1125 Foxit Foxit Reader 3.0 Build 1817 Foxit Foxit Reader 3.0 Build 1506 Foxit Foxit Reader 3.0 Foxit Foxit Reader 2.3 Build 3902 Foxit Foxit Reader 2.3 build 2923 Foxit Foxit Reader 2.3 build 2825 Foxit Foxit Reader 2.3 Foxit Foxit Reader 2.2
Not Vulnerable:	Foxit Foxit Reader 5.3

Foxit Reader Unspecified Memory Corruption Vulnerability

Foxit Reader is prone to an unspecified memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed attempts will likely cause a denial-of-service condition.

Foxit Reader 5.1.4.0104 and prior versions are vulnerable.

Foxit Reader Unspecified Memory Corruption Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Foxit Reader Unspecified Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for details.

Foxit Reader Unspecified Memory Corruption Vulnerability

References:

• Foxit Reader Homepage (Foxit )
  
• Vulnerability in Foxit Reader Could Allow Arbitrary Code Execution (Microsoft)