Intrusion PreventionFoxit.PDF.Authorization.bypass
Description
This indicates an attack attempt against an authorization-bypass vulnerability in Foxit PDF reader.
The vulnerability is caused by an error when the vulnerable software handles a crafted .pdf file. It allows a remote attacker to execute arbitrary programs via sending a crafted .pdf file.
Affected Products
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301
Impact
Security Bypass
Recommended Actions
Apply the patch available at the follolwing web site:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 17380 |
| Created | Apr 30, 2009 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2009-0836 |
| Exploit Prediction Score | 7.58% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |