Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability

Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability

Affected Systems:

Foxit Reader

Description:

Foxit Reader is a small PDF document viewer and print program.

The ConvertToPDF_x86.dll of Foxit Reader has a security vulnerability. The constructed BMP image will cause the heap buffer overflow. Attackers can exploit this vulnerability to execute arbitrary code in the context of the current process.

<* Source: kdot
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.foxitsoftware.com/support/security-bulletins.php