Tuesday, March 10, 2009

Foxit Reader Vulnerable

Foxit Reader is a light alternative to Adobe Reader used for PDF file reading. There's now found vulnerabilities in its way to handle open/execute a file action. That makes the software victim of two kinds of vulnerabilities: authorization bypass and buffer overflow.

Vulnerable are at least builds 1120 and 1301 of Foxit Reader 3.0. Older builds of 3.0 are probably affected too, but they weren't checked.

Foxit Reader users are recommended to update to the latest version (at the moment Foxit Reader 3.0 build 1506). It can be done by either using in-built updater or by downloading new version here.

More information can be read from Foxit Reader security bulletins.

No comments: