← back
CVE-2009-0836

CVE-2009-0836

30Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 41%
from disclosure to weapon0 days
Published on NVDMar 10
metasploitMar 9
exploitation probability
41%top 1% of all CVEs
observed exploitation
nono source reports it
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.
Affected products
n/a · n/a
References
http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.htmlhttp://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.htmlhttp://secunia.com/advisories/34036http://www.coresecurity.com/content/foxit-reader-vulnerabilitieshttp://www.foxitsoftware.com/pdf/reader/security.htm#bypasshttp://www.securityfocus.com/archive/1/501623/100/0/threadedhttp://www.securityfocus.com/bid/34035http://www.securitytracker.com/id?1021824http://www.vupen.com/english/advisories/2009/0634