Description
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.
References
- 43440 third-party-advisory
- ADV-2011-0508 vdb-entry
- http://secunia.com/secunia_research/2011-14/
- 43329 third-party-advisory
- http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory
- 1025129 vdb-entry