PT-2009-2872 · Foxit · Foxit Reader

Published 2009-03-10 · Updated 2018-10-11 · CVE-2009-0191

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 2.3 before Build 3902 Foxit Reader versions 3.0 before Build 1506

Description The issue arises from improper handling of a JBIG2 symbol dictionary segment with zero new symbols, allowing remote attackers to execute arbitrary code via a crafted PDF file. This is due to a dereference of an uninitialized memory location.

Recommendations For Foxit Reader versions 2.3 before Build 3902, update to Build 3902 or later to resolve the issue. For Foxit Reader versions 3.0 before Build 1506, update to Build 1506 or later to resolve the issue.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0191

Affected Products

Foxit Reader

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2009-0191 · Security Note
• http://secunia.com/advisories/34036 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0634 · Vendor Advisory
• http://secunia.com/secunia_research/2009-11 · Vendor Advisory
• http://foxitsoftware.com/pdf/reader/security.htm#Processing · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49135 · Note
• http://xforce.iss.net/xforce/xfdb/49135 · Note
• http://securitytracker.com/id?1021822 · Note
• http://securityfocus.com/bid/34035 · Note
• http://securityfocus.com/archive/1/501590/100/0/threaded · Note