CVE-2011-0332 Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-bas...
HighCVSS 9.3
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware foxit reader | <= 4.3 | No fix listed |
| foxitsoftware foxit reader | = 2.0 | No fix listed |
| foxitsoftware foxit reader | = 2.2 | No fix listed |
| foxitsoftware foxit reader | = 2.3 | No fix listed |
| foxitsoftware foxit reader | = 3.0 | No fix listed |
| foxitsoftware foxit reader | = 3.1 | No fix listed |
| foxitsoftware foxit reader | = 3.1.1 | No fix listed |
| foxitsoftware foxit reader | = 3.1.3 | No fix listed |
| foxitsoftware foxit reader | = 3.1.4 | No fix listed |
| foxitsoftware foxit reader | = 3.2 | No fix listed |
| foxitsoftware foxit reader | = 3.2.1 | No fix listed |
| foxitsoftware foxit reader | = 3.3.1 | No fix listed |
| foxitsoftware foxit reader | = 4.0 | No fix listed |
| foxitsoftware foxit reader | = 4.1.1 | No fix listed |
| foxitsoftware foxit phantom | <= 2.3 | No fix listed |
| foxitsoftware foxit phantom | = 1.0.2 | No fix listed |
| foxitsoftware foxit phantom | = 2.0 | No fix listed |
| foxitsoftware foxit phantom | = 2.1 | No fix listed |
| foxitsoftware foxit phantom | = 2.1.1 | No fix listed |
| foxitsoftware foxit phantom | = 2.2 | No fix listed |
| foxitsoftware foxit phantom | = 2.2.1 | No fix listed |
| foxitsoftware foxit phantom | = 2.2.3 | No fix listed |
| foxitsoftware foxit phantom | = 2.2.4 | No fix listed |
References
- 43329 third-party-advisory
- 43440 third-party-advisory
- secunia.com
- www.foxitsoftware.com patch vendor-advisory
- 1025129 third-party-advisory vdb-entry
- ADV-2011-0508 not-applicable vdb-entry