Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Foxit Reader < 8.1.1 Multiple Vulnerabilities

High

Synopsis

The remote host has been observed running a version of Foxit Reader that is subject to multiple attack vectors.

Description

Versions of Foxit Reader prior to 8.1.1 are affected by the following vulnerbilities :

- An overflow condition exists that is triggered as certain input is not properly validated when handling JPEG2000 images. This may allow a context-dependent attacker to cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code. (OSVDB 147469) - A use-after-free condition exists that is triggered as certain input is not properly validated when handling JPEG2000 images. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. (OSVDB 147471) - An out-of-bounds read flaw exists that is triggered when handling JPEG2000 images. This may allow a context-dependent attacker to potentially disclose memory contents. (OSVDB 147472)

Solution

Upgrade Foxit Reader to version 8.1.1 or later.