Description
Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a malformed ExtGState resource containing a /Font resource, or (2) an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probably a different vulnerability than CVE-2007-2186.
References
- 29934 third-party-advisory
- foxitreader-extgstate-code-execution(41973) vdb-entry
- foxitreader-pdf-xobject-code-execution(41972) vdb-entry
- ADV-2008-1327 vdb-entry
- 28890 vdb-entry
- http://www.vallejo.cc/proyectos/foxitreader2.htm
- http://www.vallejo.cc/proyectos/foxitreader1.htm