CVE-2011-0332

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks…

published February 25, 2011

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in Foxit Reader could let attackers slip in arbitrary code through specially crafted PDF chunks! 📄 Think of it like a suitcase that's overstuffed — one little extra item, and suddenly it's bursting at the seams, making a real mess. In this case, a rogue PDF can push things over the edge, leading to unexpected results! If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, opening the door to all sorts of mischief — from stealing data to more severe system compromises. The potential fallout could be frustrating, but thankfully, there are steps to keep this from happening!

Put simply

Think of it like a suitcase that's overstuffed — one little extra item, and suddenly it's bursting at the seams, making a real mess. In this case, a rogue PDF can push things over the edge, leading to unexpected results! This vulnerability stems from an integer overflow in Foxit Reader and Foxit Phantom, which allows attackers to manipulate ICC chunks in a PDF file, triggering a heap-based buffer overflow that leads to arbitrary code execution.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, opening the door to all sorts of mischief — from stealing data to more severe system compromises. The potential fallout could be frustrating, but thankfully, there are steps to keep this from happening! To safeguard against this issue, it's crucial to update Foxit Reader to version 4.3.1.0218 or later, and Foxit Phantom to version 2.3.3.1112 or later. Regularly check for updates to ensure you’re protected from known vulnerabilities! You’ve got this! Keep your software updated, and you’ll be well on your way to securing your system! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06166 · 93.4th percentile
Published
2011-02-25T18:00Z
EPSS history
Timeline
  • 25 FEB 18:00Z
    Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks…
    cvelistv5