CVE-2009-0691
published 2009-06-23CVE-2009-0691: The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a…
PriorityP337critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.68%
92.2th percentile
The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | jpeg2000_jbig2_decoder_add-on | <= 2.0.2009.303 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/35512http://securitytracker.com/id?1022425http://www.foxitsoftware.com/pdf/reader/security.htm#0602http://www.kb.cert.org/vuls/id/251793http://www.securityfocus.com/bid/35443http://www.vupen.com/english/advisories/2009/1640http://secunia.com/advisories/35512http://securitytracker.com/id?1022425http://www.foxitsoftware.com/pdf/reader/security.htm#0602http://www.kb.cert.org/vuls/id/251793http://www.securityfocus.com/bid/35443http://www.vupen.com/english/advisories/2009/1640
2009-06-23
Published