CVE-2009-0691

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a…

published June 23, 2009

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky flaw in the Foxit JPEG2000/JBIG2 Decoder could let crafty attackers crash the application or, even worse, execute their own code! Think of it like a restaurant kitchen that misreads a critical ingredient list. If the chef gets it wrong, it could lead to a disastrous kitchen accident—only in this case, the accident happens in your PDF reader! If successfully exploited, this vulnerability can lead to application crashes, making it impossible for users to access their important documents. In a worst-case scenario, it might even allow attackers to run malicious code on your system—definitely not the kind of surprise you want!

Put simply

Think of it like a restaurant kitchen that misreads a critical ingredient list. If the chef gets it wrong, it could lead to a disastrous kitchen accident—only in this case, the accident happens in your PDF reader! The vulnerability exists due to the Foxit Reader's inability to handle fatal errors when decoding JPEG2000 headers, leading to memory corruption. By sending a specially crafted PDF file, an attacker could manipulate this error, causing the application to crash or to execute arbitrary code.

What to do

If successfully exploited, this vulnerability can lead to application crashes, making it impossible for users to access their important documents. In a worst-case scenario, it might even allow attackers to run malicious code on your system—definitely not the kind of surprise you want! To protect yourself, it's crucial to update the Foxit Reader to the latest version, ensuring that you have the fixes for these vulnerabilities. Regularly check for updates on the add-on to keep your PDF handling secure! You've got this! Stay vigilant and you'll keep your document-reading experience safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05658 · 92.9th percentile
Published
2009-06-23T21:21Z
EPSS history
Timeline
  • 23 JUN 21:21Z
    The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a…
    cvelistv5