Approved changes feed: RSS · Atom

cpe:2.3:a:foxitsoftware:reader:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorFoxitsoftware (432505a3-624b-5d0c-b6e3-841531927527)
ProductReader (24e9cd7d-af77-5e35-8952-825774d2fae5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0836 vulnerable 2026-06-03 14:29:26.308476 Details available
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.
Published: 2009-03-10T20:00:00.000Z
Updated: 2024-08-07T04:48:52.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.