RCE in Foxitsoftware Foxit Reader
CVE-2010-1239
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.075 (93.9th percentile) — read the EPSS interpretation.
Affected products
- Foxitsoftware Foxit_reader — versions 3.1.1.0901, 3.1.1.0928, 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_CERT-VN, US Government Resource, Patch, third-party-advisory)