Foxit Reader 4.1.1 – Stack Overflow

  • 作者: dookie
    日期: 2010-11-13
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/15514/
  • Foxit Reader 4.1.1 is subject to a stack overflow vulnerability when parsing overly long unicode titles resulting in a SEH overwrite.
    The included PoC results in a SEH overwrite. The exception must be passed twice in order to reach the overwritten handler.
    This vulnerability was reported to the vendor and was patched in Foxit Reader 4.2.
    
    https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15514.pdf (foxit_411_poc.pdf)