Approved changes feed: RSS · Atom

cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*

part: a version: 3.0.2009.1301 update: *

VendorFoxitsoftware (432505a3-624b-5d0c-b6e3-841531927527)
ProductFoxit Reader (058768da-164a-5e12-a06d-4983e7214eaf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0690 vulnerable 2026-06-03 14:29:25.623087 Details available
The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read.
Published: 2009-06-23T21:21:00.000Z
Updated: 2024-09-16T23:01:54.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0191 vulnerable 2026-06-03 14:29:22.931346 Details available
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.
Published: 2009-03-10T20:00:00.000Z
Updated: 2024-08-07T04:24:18.254Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.