header-logo
Suggest Exploit
vendor:
Foxit Reader
by:
Unknown
7,8
CVSS
HIGH
Stack Overflow
119
CWE
Product Name: Foxit Reader
Affected Version From: 4.1.1
Affected Version To: 4.1.1
Patch Exists: YES
Related CWE: N/A
CPE: a:foxitsoftware:foxit_reader:4.1.1
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009

Foxit Reader 4.1.1 Stack Overflow Vulnerability

Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite. The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler.

Mitigation:

Upgrade to Foxit Reader 4.2 or later
Source

Exploit-DB raw data:

Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite.
The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler.
This vulnerability was reported to the vendor and was patched in Foxit Reader 4.2.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15514.pdf (foxit_411_poc.pdf)

Navigation

Suggest Exploit

Services By CQR