Back to Database
Status published
Critical
CVE-2009-0837
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506,...
Vulnerability Description
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0837
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/501623/100/0/threaded
- http://secunia.com/advisories/34036
- http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased
- http://www.vupen.com/english/advisories/2009/0634
- http://www.securitytracker.com/id?1021824
- http://www.securityfocus.com/bid/34035
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49136
- http://www.coresecurity.com/content/foxit-reader-vulnerabilities
More from foxit
View All →CVE-2022-47881
Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has...
Unknown
0
CVE-2022-30557
Foxit PDF Reader and PDF Editor before 11.2.2 have a...
High
7.5
CVE-2022-28104
Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary...
Critical
9.8
CVE-2022-27944
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1...
High
7.5
CVE-2022-27359
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1...
Medium
5.5
Affected Vendor
foxit
View all reports →Affected Software
reader3.0
Vulnerable Versions:
Unknown
Timeline
Official Publish:
March 10th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.