What is CVE-2011-0332?

CVE-2011-0332 is a vulnerability in Foxitsoftware Foxit Phantom, classified under CWE-189. Published 2011-02-25.

Is CVE-2011-0332 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Foxitsoftware Foxit Phantom

CVE-2011-0332

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

Foxitsoftware Foxit_phantom — versions 1.0.2, 2.0, 2.1
Foxitsoftware Foxit_reader — versions 2.0, 2.2, 2.3
N/a — versions n/a

Weakness classification (CWE)

CWE-189

Public proof-of-concept exploits

References

PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vdb-entry, Not Applicable, x_refsource_VUPEN)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2011-0332?: CVE-2011-0332 is a vulnerability in Foxitsoftware Foxit Phantom, classified under CWE-189. Published 2011-02-25.
Is CVE-2011-0332 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.