Buffer overflow in Foxitsoftware Foxit Pdf Sdk Activex

CVE-2014-8074

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.

Vulnerability class: Buffer Overflow

EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.

Affected products

Foxitsoftware Foxit_pdf_sdk_activex — versions 2.3, 3.0, 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)