Foxit Reader Insecure Library Loading Vulnerability

Last Update Date: 27 Sep 2012 10:15 Release Date: 27 Sep 2012 4797 Views

RISK: Medium Risk

TYPE: Clients - Productivity Products

A vulnerability has been identified in Foxit Reader, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the application loading libraries (fxdecod1.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a PDF file located on a remote WebDAV or SMB share.

Successful exploitation allows execution of arbitrary code, but requires the PDF document to have an invalid structure which can trigger a crash.

Impact

Remote Code Execution

System / Technologies affected

Version 5.4.2.0901 and prior versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 5.4.3.

Vulnerability Identifier

No CVE information is available

Source

Secunia