Foxit Products ICC Parsing Integer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Foxit Products ICC Parsing Integer Overflow Vulnerability
Summary
The host is installed with Foxit Products and is prone to integer overflow vulnerability.
Impact
Successful exploitation could allow attackers to crash an affected application or execute arbitrary code by tricking a user into opening a malicious file. Impact Level: System/Application
Solution
Upgrade to the Foxit Reader version 4.3.1.0218 or later. Upgrade to the Foxit Phantom version 2.3.3.1112 or later. For updates refer to http://www.foxitsoftware.com/downloads/index.php
Insight
The flaw is due to an integer overflow error when parsing certain ICC chunks and can be exploited to cause a heap-based buffer overflow via a specially crafted file.
Affected
Foxit Reader version prior to 4.3.1.0218 Foxit Phantom version prior to 2.3.3.1112
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities