CVE-2009-0836
30Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 41%
de la publicación al arma0 días
Publicada en NVD10 mar
metasploit9 mar
probabilidad de explotación
41%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.
Productos afectados
n/a · n/aReferencias
http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.htmlhttp://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.htmlhttp://secunia.com/advisories/34036http://www.coresecurity.com/content/foxit-reader-vulnerabilitieshttp://www.foxitsoftware.com/pdf/reader/security.htm#bypasshttp://www.securityfocus.com/archive/1/501623/100/0/threadedhttp://www.securityfocus.com/bid/34035http://www.securitytracker.com/id?1021824http://www.vupen.com/english/advisories/2009/0634