CVE Vulnerabilities

CVE-2011-1908

Published: Jun 24, 2011 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.

Affected Software

Name Vendor Start Version End Version
Foxit_reader Foxitsoftware * 4.0 (including)
Foxit_reader Foxitsoftware 2.0 (including) 2.0 (including)
Foxit_reader Foxitsoftware 2.2 (including) 2.2 (including)
Foxit_reader Foxitsoftware 2.3 (including) 2.3 (including)
Foxit_reader Foxitsoftware 3.0 (including) 3.0 (including)
Foxit_reader Foxitsoftware 3.1 (including) 3.1 (including)
Foxit_reader Foxitsoftware 3.1.1 (including) 3.1.1 (including)
Foxit_reader Foxitsoftware 3.1.3 (including) 3.1.3 (including)
Foxit_reader Foxitsoftware 3.1.4 (including) 3.1.4 (including)
Foxit_reader Foxitsoftware 3.2 (including) 3.2 (including)
Foxit_reader Foxitsoftware 3.2.1 (including) 3.2.1 (including)
Foxit_reader Foxitsoftware 3.3.1 (including) 3.3.1 (including)

References