Back to Database
Status published
Critical
CVE-2010-1239
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute...
Vulnerability Description
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1239
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.f-secure.com/weblog/archives/00001923.html
- http://www.kb.cert.org/vuls/id/570177
- http://blog.didierstevens.com/2010/03/29/escape-from-pdf/
- http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/
- http://www.foxitsoftware.com/pdf/reader/security.htm#0401
- http://www.foxitsoftware.com/announcements/2010420408.html
More from foxitsoftware
View All →CVE-2022-43310
An Uncontrolled Search Path Element in Foxit Software released Foxit...
Unknown
0
CVE-2021-38574
An issue was discovered in Foxit Reader and PhantomPDF before...
Critical
9.8
CVE-2021-38573
An issue was discovered in Foxit Reader and PhantomPDF before...
Critical
9.8
CVE-2021-38572
An issue was discovered in Foxit Reader and PhantomPDF before...
Critical
9.8
CVE-2021-38571
An issue was discovered in Foxit Reader and PhantomPDF before...
High
7.8
Affected Vendor
foxitsoftware
View all reports →Affected Software
foxit reader
Vulnerable Versions:
0, 2.3, 3.0, 3.1.0.0824, 3.1.1.0901, 3.1.1.0928, 3.1.3.1030
Timeline
Official Publish:
April 5th, 2010
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.