Foxit PDF Reader versions prior to 4.2.0.0928 are vulnerable to a stack buffer overflow due to improper bound-checking of the /Title entry in the PDF Info dictionary. An attacker can craft a malicious PDF with an excessively long Title string, which can corrupt the Structured Exception Handler (SEH) chain and allow arbitrary code execution in the context of the user opening the file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2010-20010 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted PDF file with an overlong Title string. When a user opens this PDF in a vulnerable version of Foxit PDF Reader, the overflow can occur, leading to arbitrary code execution with the user’s privileges.
Affected Products
- Foxit PDF Reader: Versions before 4.2.0.0928 are affected by this vulnerability, allowing for potential remote code execution.
Mitigation
Users are advised to upgrade to the latest version of Foxit PDF Reader to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.