CVE-2012-4337 — Foxit Reader vulnerability

3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
0.5%
top 32.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Foxitsoftware Foxit Reader
Timeline
PublishedAug 23
Latest updateMay 17

Description

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDfoxitsoftware/foxit_reader5.1.4.0104+18

🔴Vulnerability Details

2
GHSA
GHSA-fjf4-8rc9-mqjq: Foxit Reader before 5↗2022-05-17
▶
CVEList
CVE-2012-4337: Foxit Reader before 5↗2012-08-23
▶
CVE-2012-4337 — Foxit Reader vulnerability | cvebase