CVE-2009-0836
30Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 41%
da publicação à arma0 dias
Publicada no NVD10 de mar.
metasploit9 de mar.
probabilidade de exploração
41%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.
Produtos afetados
n/a · n/aReferências
http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.htmlhttp://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.htmlhttp://secunia.com/advisories/34036http://www.coresecurity.com/content/foxit-reader-vulnerabilitieshttp://www.foxitsoftware.com/pdf/reader/security.htm#bypasshttp://www.securityfocus.com/archive/1/501623/100/0/threadedhttp://www.securityfocus.com/bid/34035http://www.securitytracker.com/id?1021824http://www.vupen.com/english/advisories/2009/0634