Signature Detail

HTTP: Foxit Reader and Phantom Title Parsing Remote Stack Buffer Overflow Vulnerability

This signature detects attempts to exploit a known vulnerability in the Foxit Reader and Phantom. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Foxit Reader and Phantom are prone to a remote stack-based buffer-overflow vulnerability because the applications fail to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing a user to open a malicious PDF file. Successful exploits may allow the attacker to execute arbitrary code or commands in the context of a user running the affected applications.

Affected Products

• Foxit Foxit Phantom 2.1.0.0731
• Foxit Foxit Reader 3.3.1.0518
• Foxit Foxit Reader 4.1.1.805

References

• BugTraq: 43785