Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2008-7031 (GCVE-0-2008-7031)

Vulnerability from nvd – Published: 2009-08-24 10:00 – Updated: 2024-08-07 11:49

Summary

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

6 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://osvdb.org/50997	vdb-entryx_refsource_OSVDB
http://aluigi.org/adv/wachof-adv.txt	x_refsource_MISC
http://www.securityfocus.com/bid/27873	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/488366/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/28272	third-party-advisoryx_refsource_SECUNIA

Date Public

2008-02-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T11:49:02.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "wacserver-ssh-bo(40608)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
          },
          {
            "name": "50997",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50997"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.org/adv/wachof-adv.txt"
          },
          {
            "name": "27873",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27873"
          },
          {
            "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
          },
          {
            "name": "28272",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28272"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "wacserver-ssh-bo(40608)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
        },
        {
          "name": "50997",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50997"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.org/adv/wachof-adv.txt"
        },
        {
          "name": "27873",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27873"
        },
        {
          "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
        },
        {
          "name": "28272",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28272"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-7031",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "wacserver-ssh-bo(40608)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
            },
            {
              "name": "50997",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50997"
            },
            {
              "name": "http://aluigi.org/adv/wachof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.org/adv/wachof-adv.txt"
            },
            {
              "name": "27873",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27873"
            },
            {
              "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
            },
            {
              "name": "28272",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28272"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-7031",
    "datePublished": "2009-08-24T10:00:00.000Z",
    "dateReserved": "2009-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-07T11:49:02.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0691 (GCVE-0-2009-0691)

Vulnerability from nvd – Published: 2009-06-23 21:21 – Updated: 2024-09-16 22:45

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.

Severity

No CVSS data available.

CWE

n/a

Assigner

certcc CNA under the mitre root

CNA scorecard E 42/100 over 145 records in the last 180 days details

References

6 references

URL	Tags
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://securitytracker.com/id?1022425	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/251793	third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/35443	vdb-entryx_refsource_BID
http://secunia.com/advisories/35512	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1640	vdb-entryx_refsource_VUPEN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35443",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35443"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35443",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35443"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35443",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35443"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0691",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:45:23.805Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0690 (GCVE-0-2009-0690)

Vulnerability from nvd – Published: 2009-06-23 21:21 – Updated: 2024-09-16 23:01

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read.

Severity

No CVSS data available.

CWE

n/a

Assigner

certcc CNA under the mitre root

CNA scorecard E 42/100 over 145 records in the last 180 days details

References

6 references

URL	Tags
http://www.securityfocus.com/bid/35442	vdb-entryx_refsource_BID
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://securitytracker.com/id?1022425	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/251793	third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/35512	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1640	vdb-entryx_refsource_VUPEN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "35442",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35442"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "35442",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35442"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0690",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "35442",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35442"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0690",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:01:54.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0836 (GCVE-0-2009-0836)

Vulnerability from nvd – Published: 2009-03-10 20:00 – Updated: 2024-08-07 04:48

Summary

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

9 references

URL	Tags
http://www.securityfocus.com/archive/1/501623/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/34036	third-party-advisoryx_refsource_SECUNIA
http://lists.immunitysec.com/pipermail/dailydave/…	mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2009/0634	vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1021824	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/34035	vdb-entryx_refsource_BID
http://blog.zoller.lu/2009/03/remote-code-executi…	x_refsource_MISC
http://www.coresecurity.com/content/foxit-reader-…	x_refsource_MISC
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM

Date Public

2009-03-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:52.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
          },
          {
            "name": "34036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34036"
          },
          {
            "name": "[dailydave] 20100402 0day, it may not be",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
          },
          {
            "name": "ADV-2009-0634",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0634"
          },
          {
            "name": "1021824",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021824"
          },
          {
            "name": "34035",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34035"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
        },
        {
          "name": "34036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34036"
        },
        {
          "name": "[dailydave] 20100402 0day, it may not be",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
        },
        {
          "name": "ADV-2009-0634",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0634"
        },
        {
          "name": "1021824",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021824"
        },
        {
          "name": "34035",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34035"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
            },
            {
              "name": "34036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34036"
            },
            {
              "name": "[dailydave] 20100402 0day, it may not be",
              "refsource": "MLIST",
              "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
            },
            {
              "name": "ADV-2009-0634",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0634"
            },
            {
              "name": "1021824",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021824"
            },
            {
              "name": "34035",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34035"
            },
            {
              "name": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html",
              "refsource": "MISC",
              "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
            },
            {
              "name": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
              "refsource": "MISC",
              "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0836",
    "datePublished": "2009-03-10T20:00:00.000Z",
    "dateReserved": "2009-03-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:48:52.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0191 (GCVE-0-2009-0191)

Vulnerability from nvd – Published: 2009-03-10 20:00 – Updated: 2024-08-07 04:24

Summary

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.

Severity

No CVSS data available.

CWE

n/a

Assigner

flexera CNA under the mitre root

CNA scorecard – unranked: 3 records in the last 180 days, 10 needed details

References

8 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securitytracker.com/id?1021822	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/34036	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0634	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/501590/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34035	vdb-entryx_refsource_BID
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://secunia.com/secunia_research/2009-11/	x_refsource_MISC

Date Public

2009-03-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.254Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "foxitreader-jbig2-code-execution(49135)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
          },
          {
            "name": "1021822",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021822"
          },
          {
            "name": "34036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34036"
          },
          {
            "name": "ADV-2009-0634",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0634"
          },
          {
            "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
          },
          {
            "name": "34035",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34035"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-11/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "foxitreader-jbig2-code-execution(49135)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
        },
        {
          "name": "1021822",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021822"
        },
        {
          "name": "34036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34036"
        },
        {
          "name": "ADV-2009-0634",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0634"
        },
        {
          "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
        },
        {
          "name": "34035",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34035"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-11/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-0191",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "foxitreader-jbig2-code-execution(49135)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
            },
            {
              "name": "1021822",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021822"
            },
            {
              "name": "34036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34036"
            },
            {
              "name": "ADV-2009-0634",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0634"
            },
            {
              "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
            },
            {
              "name": "34035",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34035"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-11/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-11/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-0191",
    "datePublished": "2009-03-10T20:00:00.000Z",
    "dateReserved": "2009-01-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:24:18.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-1104 (GCVE-0-2008-1104)

Vulnerability from nvd – Published: 2008-05-21 10:00 – Updated: 2024-08-07 08:08

Summary

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.

Severity

No CVSS data available.

CWE

n/a

Assigner

flexera CNA under the mitre root

CNA scorecard – unranked: 3 records in the last 180 days, 10 needed details

References

10 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/492289/100…	mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1020050	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/119747	third-party-advisoryx_refsource_CERT-VN
http://www.vupen.com/english/advisories/2008/1572	vdb-entryx_refsource_VUPEN
http://secunia.com/secunia_research/2008-18/advisory/	x_refsource_MISC
http://www.securityfocus.com/bid/29288	vdb-entryx_refsource_BID
http://secunia.com/advisories/29941	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/3899	third-party-advisoryx_refsource_SREASON
http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM

Date Public

2008-05-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:08:57.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "foxitreader-utilprintf-bo(42531)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
          },
          {
            "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
          },
          {
            "name": "1020050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020050"
          },
          {
            "name": "VU#119747",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/119747"
          },
          {
            "name": "ADV-2008-1572",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1572"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2008-18/advisory/"
          },
          {
            "name": "29288",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29288"
          },
          {
            "name": "29941",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29941"
          },
          {
            "name": "3899",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3899"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "foxitreader-utilprintf-bo(42531)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
        },
        {
          "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
        },
        {
          "name": "1020050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020050"
        },
        {
          "name": "VU#119747",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/119747"
        },
        {
          "name": "ADV-2008-1572",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1572"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2008-18/advisory/"
        },
        {
          "name": "29288",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29288"
        },
        {
          "name": "29941",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29941"
        },
        {
          "name": "3899",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3899"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2008-1104",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "foxitreader-utilprintf-bo(42531)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
            },
            {
              "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
            },
            {
              "name": "1020050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020050"
            },
            {
              "name": "VU#119747",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/119747"
            },
            {
              "name": "ADV-2008-1572",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1572"
            },
            {
              "name": "http://secunia.com/secunia_research/2008-18/advisory/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2008-18/advisory/"
            },
            {
              "name": "29288",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29288"
            },
            {
              "name": "29941",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29941"
            },
            {
              "name": "3899",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3899"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2008-1104",
    "datePublished": "2008-05-21T10:00:00.000Z",
    "dateReserved": "2008-02-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:08:57.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-0151 (GCVE-0-2008-0151)

Vulnerability from nvd – Published: 2008-01-09 00:00 – Updated: 2024-08-07 07:32

Summary

Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

8 references

URL	Tags
http://securityreason.com/securityalert/3525	third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/27142	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://aluigi.altervista.org/adv/waccaz-adv.txt	x_refsource_MISC
http://www.securityfocus.com/archive/1/488366/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/485812/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/28272	third-party-advisoryx_refsource_SECUNIA
http://aluigi.altervista.org/adv/wachof-adv.txt	x_refsource_MISC

Date Public

2008-01-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:32:23.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "3525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3525"
          },
          {
            "name": "27142",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27142"
          },
          {
            "name": "wacserver-option-dos(39427)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
          },
          {
            "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
          },
          {
            "name": "20080104 Some DoS in some telnet servers",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
          },
          {
            "name": "28272",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28272"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-01-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "3525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3525"
        },
        {
          "name": "27142",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27142"
        },
        {
          "name": "wacserver-option-dos(39427)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
        },
        {
          "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
        },
        {
          "name": "20080104 Some DoS in some telnet servers",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
        },
        {
          "name": "28272",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28272"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-0151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "3525",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3525"
            },
            {
              "name": "27142",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27142"
            },
            {
              "name": "wacserver-option-dos(39427)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
            },
            {
              "name": "http://aluigi.altervista.org/adv/waccaz-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
            },
            {
              "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
            },
            {
              "name": "20080104 Some DoS in some telnet servers",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
            },
            {
              "name": "28272",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28272"
            },
            {
              "name": "http://aluigi.altervista.org/adv/wachof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-0151",
    "datePublished": "2008-01-09T00:00:00.000Z",
    "dateReserved": "2008-01-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:32:23.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-7031 (GCVE-0-2008-7031)

Vulnerability from cvelistv5 – Published: 2009-08-24 10:00 – Updated: 2024-08-07 11:49

Summary

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

6 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://osvdb.org/50997	vdb-entryx_refsource_OSVDB
http://aluigi.org/adv/wachof-adv.txt	x_refsource_MISC
http://www.securityfocus.com/bid/27873	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/488366/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/28272	third-party-advisoryx_refsource_SECUNIA

Date Public

2008-02-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T11:49:02.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "wacserver-ssh-bo(40608)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
          },
          {
            "name": "50997",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50997"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.org/adv/wachof-adv.txt"
          },
          {
            "name": "27873",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27873"
          },
          {
            "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
          },
          {
            "name": "28272",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28272"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-02-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "wacserver-ssh-bo(40608)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
        },
        {
          "name": "50997",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50997"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.org/adv/wachof-adv.txt"
        },
        {
          "name": "27873",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27873"
        },
        {
          "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
        },
        {
          "name": "28272",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28272"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-7031",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "wacserver-ssh-bo(40608)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40608"
            },
            {
              "name": "50997",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50997"
            },
            {
              "name": "http://aluigi.org/adv/wachof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.org/adv/wachof-adv.txt"
            },
            {
              "name": "27873",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27873"
            },
            {
              "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
            },
            {
              "name": "28272",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28272"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-7031",
    "datePublished": "2009-08-24T10:00:00.000Z",
    "dateReserved": "2009-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-07T11:49:02.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0691 (GCVE-0-2009-0691)

Vulnerability from cvelistv5 – Published: 2009-06-23 21:21 – Updated: 2024-09-16 22:45

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.

Severity

No CVSS data available.

CWE

n/a

Assigner

certcc CNA under the mitre root

CNA scorecard E 42/100 over 145 records in the last 180 days details

References

6 references

URL	Tags
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://securitytracker.com/id?1022425	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/251793	third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/35443	vdb-entryx_refsource_BID
http://secunia.com/advisories/35512	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1640	vdb-entryx_refsource_VUPEN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35443",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35443"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35443",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35443"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35443",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35443"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0691",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:45:23.805Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0690 (GCVE-0-2009-0690)

Vulnerability from cvelistv5 – Published: 2009-06-23 21:21 – Updated: 2024-09-16 23:01

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read.

Severity

No CVSS data available.

CWE

n/a

Assigner

certcc CNA under the mitre root

CNA scorecard E 42/100 over 145 records in the last 180 days details

References

6 references

URL	Tags
http://www.securityfocus.com/bid/35442	vdb-entryx_refsource_BID
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://securitytracker.com/id?1022425	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/251793	third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/35512	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1640	vdb-entryx_refsource_VUPEN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "35442",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35442"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "35442",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35442"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0690",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "35442",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35442"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0690",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:01:54.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0191 (GCVE-0-2009-0191)

Vulnerability from cvelistv5 – Published: 2009-03-10 20:00 – Updated: 2024-08-07 04:24

Summary

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.

Severity

No CVSS data available.

CWE

n/a

Assigner

flexera CNA under the mitre root

CNA scorecard – unranked: 3 records in the last 180 days, 10 needed details

References

8 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securitytracker.com/id?1021822	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/34036	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0634	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/501590/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34035	vdb-entryx_refsource_BID
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM
http://secunia.com/secunia_research/2009-11/	x_refsource_MISC

Date Public

2009-03-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:24:18.254Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "foxitreader-jbig2-code-execution(49135)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
          },
          {
            "name": "1021822",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021822"
          },
          {
            "name": "34036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34036"
          },
          {
            "name": "ADV-2009-0634",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0634"
          },
          {
            "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
          },
          {
            "name": "34035",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34035"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-11/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "foxitreader-jbig2-code-execution(49135)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
        },
        {
          "name": "1021822",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021822"
        },
        {
          "name": "34036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34036"
        },
        {
          "name": "ADV-2009-0634",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0634"
        },
        {
          "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
        },
        {
          "name": "34035",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34035"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-11/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-0191",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "foxitreader-jbig2-code-execution(49135)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"
            },
            {
              "name": "1021822",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021822"
            },
            {
              "name": "34036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34036"
            },
            {
              "name": "ADV-2009-0634",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0634"
            },
            {
              "name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"
            },
            {
              "name": "34035",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34035"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-11/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-11/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-0191",
    "datePublished": "2009-03-10T20:00:00.000Z",
    "dateReserved": "2009-01-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:24:18.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0836 (GCVE-0-2009-0836)

Vulnerability from cvelistv5 – Published: 2009-03-10 20:00 – Updated: 2024-08-07 04:48

Summary

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

9 references

URL	Tags
http://www.securityfocus.com/archive/1/501623/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/34036	third-party-advisoryx_refsource_SECUNIA
http://lists.immunitysec.com/pipermail/dailydave/…	mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2009/0634	vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1021824	vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/34035	vdb-entryx_refsource_BID
http://blog.zoller.lu/2009/03/remote-code-executi…	x_refsource_MISC
http://www.coresecurity.com/content/foxit-reader-…	x_refsource_MISC
http://www.foxitsoftware.com/pdf/reader/security.…	x_refsource_CONFIRM

Date Public

2009-03-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:52.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
          },
          {
            "name": "34036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34036"
          },
          {
            "name": "[dailydave] 20100402 0day, it may not be",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
          },
          {
            "name": "ADV-2009-0634",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0634"
          },
          {
            "name": "1021824",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021824"
          },
          {
            "name": "34035",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/34035"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
        },
        {
          "name": "34036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34036"
        },
        {
          "name": "[dailydave] 20100402 0day, it may not be",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
        },
        {
          "name": "ADV-2009-0634",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0634"
        },
        {
          "name": "1021824",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021824"
        },
        {
          "name": "34035",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/34035"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20090309 Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/501623/100/0/threaded"
            },
            {
              "name": "34036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34036"
            },
            {
              "name": "[dailydave] 20100402 0day, it may not be",
              "refsource": "MLIST",
              "url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html"
            },
            {
              "name": "ADV-2009-0634",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0634"
            },
            {
              "name": "1021824",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021824"
            },
            {
              "name": "34035",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/34035"
            },
            {
              "name": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html",
              "refsource": "MISC",
              "url": "http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html"
            },
            {
              "name": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities",
              "refsource": "MISC",
              "url": "http://www.coresecurity.com/content/foxit-reader-vulnerabilities"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#bypass"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0836",
    "datePublished": "2009-03-10T20:00:00.000Z",
    "dateReserved": "2009-03-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:48:52.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-1104 (GCVE-0-2008-1104)

Vulnerability from cvelistv5 – Published: 2008-05-21 10:00 – Updated: 2024-08-07 08:08

Summary

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.

Severity

No CVSS data available.

CWE

n/a

Assigner

flexera CNA under the mitre root

CNA scorecard – unranked: 3 records in the last 180 days, 10 needed details

References

10 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/492289/100…	mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1020050	vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/119747	third-party-advisoryx_refsource_CERT-VN
http://www.vupen.com/english/advisories/2008/1572	vdb-entryx_refsource_VUPEN
http://secunia.com/secunia_research/2008-18/advisory/	x_refsource_MISC
http://www.securityfocus.com/bid/29288	vdb-entryx_refsource_BID
http://secunia.com/advisories/29941	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/3899	third-party-advisoryx_refsource_SREASON
http://support.nortel.com/go/main.jsp?cscat=BLTND…	x_refsource_CONFIRM

Date Public

2008-05-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:08:57.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "foxitreader-utilprintf-bo(42531)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
          },
          {
            "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
          },
          {
            "name": "1020050",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020050"
          },
          {
            "name": "VU#119747",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/119747"
          },
          {
            "name": "ADV-2008-1572",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1572"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2008-18/advisory/"
          },
          {
            "name": "29288",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29288"
          },
          {
            "name": "29941",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29941"
          },
          {
            "name": "3899",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3899"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "foxitreader-utilprintf-bo(42531)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
        },
        {
          "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
        },
        {
          "name": "1020050",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020050"
        },
        {
          "name": "VU#119747",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/119747"
        },
        {
          "name": "ADV-2008-1572",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1572"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2008-18/advisory/"
        },
        {
          "name": "29288",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29288"
        },
        {
          "name": "29941",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29941"
        },
        {
          "name": "3899",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3899"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2008-1104",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "foxitreader-utilprintf-bo(42531)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42531"
            },
            {
              "name": "20080520 Secunia Research: Foxit Reader \"util.printf()\" Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/492289/100/0/threaded"
            },
            {
              "name": "1020050",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020050"
            },
            {
              "name": "VU#119747",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/119747"
            },
            {
              "name": "ADV-2008-1572",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1572"
            },
            {
              "name": "http://secunia.com/secunia_research/2008-18/advisory/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2008-18/advisory/"
            },
            {
              "name": "29288",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29288"
            },
            {
              "name": "29941",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29941"
            },
            {
              "name": "3899",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3899"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=800801"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2008-1104",
    "datePublished": "2008-05-21T10:00:00.000Z",
    "dateReserved": "2008-02-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T08:08:57.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2008-0151 (GCVE-0-2008-0151)

Vulnerability from cvelistv5 – Published: 2008-01-09 00:00 – Updated: 2024-08-07 07:32

Summary

Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options.

Severity

No CVSS data available.

CWE

n/a

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2386 records in the last 180 days details

References

8 references

URL	Tags
http://securityreason.com/securityalert/3525	third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/27142	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://aluigi.altervista.org/adv/waccaz-adv.txt	x_refsource_MISC
http://www.securityfocus.com/archive/1/488366/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/485812/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/28272	third-party-advisoryx_refsource_SECUNIA
http://aluigi.altervista.org/adv/wachof-adv.txt	x_refsource_MISC

Date Public

2008-01-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:32:23.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "3525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3525"
          },
          {
            "name": "27142",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/27142"
          },
          {
            "name": "wacserver-option-dos(39427)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
          },
          {
            "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
          },
          {
            "name": "20080104 Some DoS in some telnet servers",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
          },
          {
            "name": "28272",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28272"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-01-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "3525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3525"
        },
        {
          "name": "27142",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/27142"
        },
        {
          "name": "wacserver-option-dos(39427)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
        },
        {
          "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
        },
        {
          "name": "20080104 Some DoS in some telnet servers",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
        },
        {
          "name": "28272",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28272"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-0151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "3525",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3525"
            },
            {
              "name": "27142",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/27142"
            },
            {
              "name": "wacserver-option-dos(39427)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39427"
            },
            {
              "name": "http://aluigi.altervista.org/adv/waccaz-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/waccaz-adv.txt"
            },
            {
              "name": "20080219 Two heap overflow in Foxit WAC Server 2.0 Build 3503",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488366/100/200/threaded"
            },
            {
              "name": "20080104 Some DoS in some telnet servers",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/485812/100/0/threaded"
            },
            {
              "name": "28272",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28272"
            },
            {
              "name": "http://aluigi.altervista.org/adv/wachof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/wachof-adv.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-0151",
    "datePublished": "2008-01-09T00:00:00.000Z",
    "dateReserved": "2008-01-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T07:32:23.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

1604 vulnerabilities by foxitsoftware

CVE-2008-7031 (GCVE-0-2008-7031)

CVE-2009-0691 (GCVE-0-2009-0691)

CVE-2009-0690 (GCVE-0-2009-0690)

CVE-2009-0836 (GCVE-0-2009-0836)

CVE-2009-0191 (GCVE-0-2009-0191)

CVE-2008-1104 (GCVE-0-2008-1104)

CVE-2008-0151 (GCVE-0-2008-0151)

CVE-2008-7031 (GCVE-0-2008-7031)

CVE-2009-0691 (GCVE-0-2009-0691)

CVE-2009-0690 (GCVE-0-2009-0690)

CVE-2009-0191 (GCVE-0-2009-0191)

CVE-2009-0836 (GCVE-0-2009-0836)

CVE-2008-1104 (GCVE-0-2008-1104)

CVE-2008-0151 (GCVE-0-2008-0151)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

1604 vulnerabilities by foxitsoftware

CVE-2008-7031 (GCVE-0-2008-7031)

CVE-2009-0691 (GCVE-0-2009-0691)

CVE-2009-0690 (GCVE-0-2009-0690)

CVE-2009-0836 (GCVE-0-2009-0836)

CVE-2009-0191 (GCVE-0-2009-0191)

CVE-2008-1104 (GCVE-0-2008-1104)

CVE-2008-0151 (GCVE-0-2008-0151)

CVE-2008-7031 (GCVE-0-2008-7031)

CVE-2009-0691 (GCVE-0-2009-0691)

CVE-2009-0690 (GCVE-0-2009-0690)

CVE-2009-0191 (GCVE-0-2009-0191)

CVE-2009-0836 (GCVE-0-2009-0836)

CVE-2008-1104 (GCVE-0-2008-1104)

CVE-2008-0151 (GCVE-0-2008-0151)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.