Vulnerability Name: | CVE-2008-1104 (CCN-42531) | ||||||||
Assigned: | 2008-05-20 | ||||||||
Published: | 2008-05-20 | ||||||||
Updated: | 2018-10-11 | ||||||||
Summary: | Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C) 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-119 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2008-1104 Source: CCN Type: SA29941 Foxit Reader "util.printf()" Buffer Overflow Source: SECUNIA Type: UNKNOWN 29941 Source: CCN Type: Secunia Research 20/05/2008 Foxit Reader "util.printf()" Buffer Overflow Source: MISC Type: UNKNOWN http://secunia.com/secunia_research/2008-18/advisory/ Source: SREASON Type: Third Party Advisory 3899 Source: CCN Type: SECTRACK ID: 1020050 Foxit Reader Stack Overflow in util.printf() Lets Remote Users Execute Arbitrary Code Source: CONFIRM Type: Broken Link http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801 Source: CCN Type: Foxit Software Web site Foxit Reader 2.3 for Windows Source: CCN Type: US-CERT VU#119747 Foxit Reader buffer overflow vulnerability Source: CERT-VN Type: Third Party Advisory, US Government Resource VU#119747 Source: CCN Type: OSVDB ID: 45351 Foxit Reader util.printf() Function PDF File Handling Overflow Source: BUGTRAQ Type: UNKNOWN 20080520 Secunia Research: Foxit Reader "util.printf()" Buffer Overflow Source: BID Type: Third Party Advisory, VDB Entry 29288 Source: CCN Type: BID-29288 Foxit Reader 'util.printf()' Remote Buffer Overflow Vulnerability Source: SECTRACK Type: Third Party Advisory, VDB Entry 1020050 Source: VUPEN Type: Permissions Required ADV-2008-1572 Source: XF Type: UNKNOWN foxitreader-utilprintf-bo(42531) Source: XF Type: UNKNOWN foxitreader-utilprintf-bo(42531) | ||||||||
Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
BACK |