CVE

Id
37626  
CVE No.
CVE-2009-0191  
Status
Candidate  
Description
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.  
Phase
Assigned (20090120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
408515 37626 CVE-2009-0191 BUGTRAQ:20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability  View
408516 37626 CVE-2009-0191 URL:http://www.securityfocus.com/archive/1/archive/1/501590/100/0/threaded  View
408517 37626 CVE-2009-0191 MISC:http://secunia.com/secunia_research/2009-11/  View
408518 37626 CVE-2009-0191 CONFIRM:http://www.foxitsoftware.com/pdf/reader/security.htm#Processing  View
408519 37626 CVE-2009-0191 BID:34035  View
408520 37626 CVE-2009-0191 URL:http://www.securityfocus.com/bid/34035  View
408521 37626 CVE-2009-0191 SECTRACK:1021822  View
408522 37626 CVE-2009-0191 URL:http://www.securitytracker.com/id?1021822  View
408523 37626 CVE-2009-0191 SECUNIA:34036  View
408524 37626 CVE-2009-0191 URL:http://secunia.com/advisories/34036  View
408525 37626 CVE-2009-0191 VUPEN:ADV-2009-0634  View
408526 37626 CVE-2009-0191 URL:http://www.vupen.com/english/advisories/2009/0634  View
408527 37626 CVE-2009-0191 XF:foxitreader-jbig2-code-execution(49135)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40279 JVNDB-2009-001285 Xpdf および CUPS におけるバッファオーバーフローの脆弱性 Xpdf および CUPS には PDF ファイルの処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0195 37626 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001285.html  View