QwikSec

Security Database

CVE

CWE

Training

CVE-2009-0837

Published: Mar 10, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

foxitreader-pdf-bo(49136)

vdb-entry

x_refsource_XF

http://www.coresecurity.com/content/foxit-reader-vulnerabilities

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.