The host is installed with Foxit Reader and is prone to integer overflow vulnerability.

Successful exploitation will let attacker execute arbitrary code or crash an affected application or gain the same user rights as the logged-on user. Impact Level: System/Application

Upgrade to Foxit Reader version 4.0.0.0619 or later. For updates refer to http://www.foxitsoftware.com/downloads/

The flaw is due to an error in FreeType engine when handling certain invalid font type, which allows attackers to execute arbitrary code.

Foxit Reader version prior to 4.0.0.0619

• http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype
• http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx
• http://xforce.iss.net/xforce/xfdb/68145

---

Updated on 2015-03-25