Foxit Reader out-of-bounds read information leakage Vulnerability (CVE-2017-10944)

Foxit Reader out-of-bounds read information leakage Vulnerability (CVE-2017-10944)
Foxit Reader out-of-bounds read information leakage Vulnerability (CVE-2017-10944)

Release date:
Updated on:

Affected Systems:

Foxit Reader 8.3.0.14878

Description:

Bugtraq id: 102807
CVE (CAN) ID: CVE-2017-10944

Foxit Reader is a small PDF document viewer and print program.

Foxit Reader 8.3.0.14878 has a security vulnerability in ObjStm Object Parsing. Attackers can exploit this vulnerability to execute arbitrary code in the context of the current process.

<* Source: Ashfaq Ansari
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.foxitsoftware.com
Https://www.foxitsoftware.com/support/security-bulletins.php
Http://zerodayinitiative.com/advisories/ZDI-17-458/