CVE-2009-0837

Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1)…

published March 10, 2009

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
76%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ An unguarded entry point lets attackers open the door to your system! A stack-based buffer overflow in Foxit Reader 3.0 allows remote code execution via long filename paths, making it a sneaky vulnerability. 🔥 This vulnerability is like a hotel that allows guests to check in with any reservation they claim, no verification needed. Imagine someone walking into your room simply by stating a name — a recipe for disaster! An attacker could exploit this flaw to execute arbitrary code on your system, potentially gaining unauthorized access to sensitive data or causing damage. It’s the kind of situation that could lead to chaos, where your computer takes orders from someone else!

Put simply

This vulnerability is like a hotel that allows guests to check in with any reservation they claim, no verification needed. Imagine someone walking into your room simply by stating a name — a recipe for disaster! This stack-based buffer overflow occurs when Foxit Reader improperly handles long filename arguments in certain actions. By providing a crafted filename, an attacker can overwrite the process's memory, leading to arbitrary code execution.

What to do

An attacker could exploit this flaw to execute arbitrary code on your system, potentially gaining unauthorized access to sensitive data or causing damage. It’s the kind of situation that could lead to chaos, where your computer takes orders from someone else! To mitigate this risk, update to the latest version of Foxit Reader. Additionally, ensure your users are trained to avoid opening files from untrusted sources and regularly review software for updates. You've got this! Stay proactive and keep your systems safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.75781 · 99.5th percentile
Published
2009-03-10T20:00Z
EPSS history
Timeline
  • 10 MAR 20:00Z
    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1)…
    cvelistv5