CVE-2011-1908 — Foxit Reader vulnerability

CWE-1893 documents3 sources
Severity
9.3CRITICALNVD
EPSS
0.7%
top 27.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Foxitsoftware Foxit Reader
Timeline
PublishedJun 24
Latest updateMay 17

Description

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.foxitsoftware.com ↗Patch: www.foxitsoftware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x6jw-95g6-c4pf: Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4↗2022-05-17
▶
CVEList
CVE-2011-1908: Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4↗2011-06-24
▶
CVE-2011-1908 — Foxit Reader vulnerability | cvebase