CVE-2011-1908

Опубликовано: 24 июн. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.

Ссылки

http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype
Patch
Vendor Advisory
http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx
Third Party Advisory
http://www.securityfocus.com/bid/48359
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/68145
http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype
Patch
Vendor Advisory
http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx
Third Party Advisory
http://www.securityfocus.com/bid/48359
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/68145

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*

Версия до 4.0 (включая)

cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.1:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.2:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00734

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-x6jw-95g6-c4pf

github

больше 3 лет назад