PT-2008-2702 · Foxit · Foxit Reader

Dyon Balding · Published 2008-05-21 · Updated 2025-10-22 · CVE-2008-1104

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 2.3 build 2912

Description The issue allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file. It is related to the util.printf JavaScript function and floating point specifiers in format strings.

Recommendations For versions prior to 2.3 build 2912, update to version 2.3 build 2912 or later to resolve the issue. As a temporary workaround, consider disabling the util.printf JavaScript function until a patch is available. Avoid opening crafted PDF files from untrusted sources to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1104

Affected Products

Foxit Reader

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2008-1104 · Security Note
• https://t.me/cveNotify/139754 · Telegram Post
• http://kb.cert.org/vuls/id/119747 · Note
• https://t.me/cvenotify/113820 · Telegram Post
• http://securityfocus.com/bid/29288 · Note
• http://secunia.com/advisories/29941 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42531 · Note
• https://t.me/cveNotify/139791 · Telegram Post
• http://secunia.com/secunia_research/2008-18/advisory · Note
• https://t.me/cvenotify/86400 · Telegram Post
• http://securitytracker.com/id?1020050 · Note
• http://vupen.com/english/advisories/2008/1572 · Note
• https://t.me/cvenotify/104923 · Telegram Post
• http://securityreason.com/securityalert/3899 · Note
• http://frsirt.com/english/advisories/2008/1572 · Note