ID CVE-2012-4337
Summary Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.
References
Vulnerable Configurations
  • cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1013:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1013:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1030:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.2.1030:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.2.0.0303:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.2.0.0303:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.2.1.0401:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.2.1.0401:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.0.0.0619:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.0.0.0619:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.1.1.0805:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.1.1.0805:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.3.1.0218:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.3.1.0218:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.1.0.1021:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.1.0.1021:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.0.0111:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.0.0111:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.0.0824:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.0.0824:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.1.0901:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.1.0901:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4.1125:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4.1125:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.2:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.3.0.0430:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.3.0.0430:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1.0520:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1.0520:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.1.0.0726:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.1.0.0726:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.2.0.0928:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.2.0.0928:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:4.3.0.1110:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:4.3.0.1110:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.0.1.0523:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.0.1.0523:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.0.2.0718:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.0.2.0718:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.1.3.1201:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.1.3.1201:*:*:*:*:*:*:*
  • cpe:2.3:a:foxitsoftware:foxit_reader:5.1.4.0104:*:*:*:*:*:*:*
    cpe:2.3:a:foxitsoftware:foxit_reader:5.1.4.0104:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 24-08-2012 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 55150
confirm http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php
misc http://technet.microsoft.com/security/msvr/msvr12-013
osvdb 84808
sectrack 1027424
secunia 50359
Last major update 24-08-2012 - 04:00
Published 23-08-2012 - 15:55
Last modified 24-08-2012 - 04:00
Back to Top