Foxit Reader Facebook Plugin Insecure Library Loading Vulnerability
Last Update Date:
7 Jun 2013
Release Date:
24 Aug 2012
5104
Views
RISK: Medium Risk
TYPE: Clients - Productivity Products
A vulnerability has been identified in Foxit Reader, which can be exploited by malicious people to compromise a user's system. The bundled Facebook plug-in (facebook_plugin.fpi) loads libraries (e.g. dwmapi.dll) in an insecure manner and can be exploited to load arbitrary libraries by tricking a user into e.g. opening a PDF file located on a remote WebDAV or SMB share.
NOTE: Currently, there is no patch available for this vulnerability.
Impact
- Remote Code Execution
System / Technologies affected
- Foxit Reader 5.x
Solutions
- NOTE: Currently, there is no patch available for this vulnerability.
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with