critical9.3
CVE-2011-0332
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks…
Impact
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | through 4.3 Versions 2.0, 2.2, 2.3, 3.0, 3.1 |
| Foxitsoftware | Foxit Phantom | through 2.3 Versions 1.0.2, 2.0, 2.1, 2.1.1, 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/43329
- http://secunia.com/advisories/43440
- http://secunia.com/secunia_research/2011-14/
- http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory
- http://www.securitytracker.com/id?1025129
- http://www.vupen.com/english/advisories/2011/0508
- http://secunia.com/advisories/43329
- http://secunia.com/advisories/43440
- http://secunia.com/secunia_research/2011-14/
- http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory
- http://www.securitytracker.com/id?1025129
- http://www.vupen.com/english/advisories/2011/0508