CVE-2010-20010: Foxit PDF Reader < 4.2.0.0928 Title Stack Buffer Overflow
Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-20010?
CVE-2010-20010 is rated as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2010-20010?
To mitigate CVE-2010-20010, update Foxit PDF Reader to version 4.2.0.0928 or later.
What types of attacks can exploit CVE-2010-20010?
CVE-2010-20010 can be exploited through specially crafted PDF files containing an overly long /Title entry.
What versions of Foxit PDF Reader are affected by CVE-2010-20010?
Foxit PDF Reader versions prior to 4.2.0.0928 are affected by CVE-2010-20010.
What is the impact of CVE-2010-20010?
The impact of CVE-2010-20010 includes possible arbitrary code execution and system compromise.