CVE-2008-1104: Buffer Overflow
Published May 21, 2008
·Updated
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.
Affected Software
3 affected components
Foxitsoftware Foxit Reader<=2.3
Foxitsoftware Foxit Reader=2.0
Foxitsoftware Foxit Reader=2.2
Event History
May 21, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1104?
CVE-2008-1104 has a high severity level due to its potential to allow remote code execution.
2
How do I fix CVE-2008-1104?
To fix CVE-2008-1104, upgrade to Foxit Reader version 2.3 build 2912 or later.
3
What systems are affected by CVE-2008-1104?
CVE-2008-1104 affects Foxit Reader versions up to and including 2.3, specifically versions 2.0 and 2.2.
4
What type of vulnerability is CVE-2008-1104?
CVE-2008-1104 is a stack-based buffer overflow vulnerability.
5
What type of attack can exploit CVE-2008-1104?
CVE-2008-1104 can be exploited by remote attackers through a maliciously crafted PDF file.