HTTP: Foxit Reader Escape From PDF Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Foxit Reader, a PDF file viewer. A successful attack can lead to arbitrary code execution.

Extended Description

Foxit Reader is prone to a remote code-execution vulnerability because it fails to properly restrict access to certain functionality. An attacker can exploit this issue by enticing a user to open a malicious PDF file. Successful exploits may allow the attacker to execute arbitrary code or commands in the context of a user running the affected application. The issue affects Foxit Reader 3.2.0.0303 and prior; other versions may also be affected.

Affected Products

Adobe acrobat

References

BugTraq: 39109

CVE: CVE-2010-1240

URL: http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/ http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/ http://blog.didierstevens.com/2010/03/29/escape-from-pdf/ http://www.adobe.com/support/security/bulletins/apsb10-15.html

Short Name

HTTP:STC:DL:FOXIT-READER-ESCAPE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Foxit Reader Escape From PDF Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?