Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveFlexeraCVE-2008-1104
HistoryMay 21, 2008 - 1:24 p.m.

CVE-2008-1104

2008-05-2113:24:00
CWE-119
flexera
web.nvd.nist.gov
37
In Wild
cve-2008-1104
foxit reader
buffer overflow
pdf
remote code execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.166

Percentile

96.0%

JSON

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.

Affected configurations

Nvd
Node
foxitsoftwarefoxit_readerRange≀2.3
OR
foxitsoftwarefoxit_readerMatch2.0
OR
foxitsoftwarefoxit_readerMatch2.2
VendorProductVersionCPE
foxitsoftwarefoxit_reader*cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader2.0cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*
foxitsoftwarefoxit_reader2.2cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*

Related

seebug 1
securityvulns 3
prion 2
cert 1
nessus 1
cvelist 2
canvas 1
nvd 2
cve 1
ubuntucve 1
zdt 1
attackerkb 1
coresecurity 1
seebug
seebug
Foxit Reader util.printf()ε‡½ζ•°θΏœη¨‹ζ ˆζΊ’ε‡ΊζΌζ΄ž
2008-05-22 00:00:00
securityvulns
securityvulns
Secunia Research: Foxit Reader "util.printf()" Buffer Overflow
2008-05-20 00:00:00
Foxit Reader buffer overflow
2008-05-20 00:00:00
CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow
2008-11-05 00:00:00
prion
prion
Stack overflow
2008-05-21 13:24:00
Stack overflow
2008-11-04 18:29:00
cert
cert
Foxit Reader buffer overflow vulnerability
2008-05-27 00:00:00
nessus
nessus
Foxit Reader < 2.3 Build 2923 util.printf() Floating Point Specifier RCE
2008-05-20 00:00:00
cvelist
cvelist
CVE-2008-1104
2008-05-21 10:00:00
CVE-2008-2992
2008-11-04 18:00:00
canvas
canvas
Immunity Canvas: FOXIT_PRINTF
2008-05-21 13:24:00
nvd
nvd
CVE-2008-1104
2008-05-21 13:24:00
CVE-2008-2992
2008-11-04 18:29:47
cve
cve
CVE-2008-2992
2008-11-04 18:29:47
ubuntucve
ubuntucve
CVE-2008-2992
2008-11-04 00:00:00
zdt
zdt
Adobe Reader util.printf() JavaScript Function Stack Overflow Exploit
2008-11-05 00:00:00
attackerkb
attackerkb
CVE-2008-2992
2008-11-04 00:00:00
coresecurity
coresecurity
Adobe Reader Javascript Printf Buffer Overflow
2008-11-04 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.166

Percentile

96.0%

JSON
Related for CVE-2008-1104
seebug1securityvulns3prion2cert1nessus1cvelist2canvas1nvd2cve1ubuntucve1zdt1attackerkb1coresecurity1