Description
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.
References
- foxitreader-utilprintf-bo(42531) vdb-entry
- 20080520 Secunia Research: Foxit Reader "util.printf()" Buffer Overflow mailing-list
- 1020050 vdb-entry
- VU#119747 third-party-advisory
- ADV-2008-1572 vdb-entry
- http://secunia.com/secunia_research/2008-18/advisory/
- 29288 vdb-entry
- 29941 third-party-advisory
- 3899 third-party-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801