PT-2008-2702 · Foxit · Foxit Reader

Dyon Balding · Publicado 2008-05-21 · Atualizado 2025-10-22 · CVE-2008-1104

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 2.3 build 2912

Description The issue allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file. It is related to the util.printf JavaScript function and floating point specifiers in format strings.

Recommendations For versions prior to 2.3 build 2912, update to version 2.3 build 2912 or later to resolve the issue. As a temporary workaround, consider disabling the util.printf JavaScript function until a patch is available. Avoid opening crafted PDF files from untrusted sources to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1104

Produtos afetados

Foxit Reader

Referências · 20

• https://t.me/cveNotify/139754 · Publicação no Telegram
• http://kb.cert.org/vuls/id/119747 · Nota
• https://t.me/cvenotify/113820 · Publicação no Telegram
• http://securityfocus.com/bid/29288 · Nota
• http://secunia.com/advisories/29941 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42531 · Nota
• https://t.me/cveNotify/139791 · Publicação no Telegram
• http://secunia.com/secunia_research/2008-18/advisory · Nota
• https://t.me/cvenotify/86400 · Publicação no Telegram
• http://securitytracker.com/id?1020050 · Nota
• http://vupen.com/english/advisories/2008/1572 · Nota
• https://t.me/cvenotify/104923 · Publicação no Telegram
• http://securityreason.com/securityalert/3899 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1104 · Nota de Segurança
• http://frsirt.com/english/advisories/2008/1572 · Nota