Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-0837.
PoCs published by Metasploit, SkD, Francisco Falcon, bannedit, including Metasploit module exploits/windows/fileformat/foxit_reader_launch.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Foxit Reader 3.0 via a maliciously crafted PDF file with an Open Execute Action. It achieves arbitrary code execution by overflowing the buffer with a payload and manipulating the return address.
Description
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Foxit Reader 3.0 via a maliciously crafted PDF file with an Open Execute Action. It achieves arbitrary code execution by overflowing the buffer with a payload and manipulating the return address.
This exploit targets a SEH buffer overflow in Foxit Reader 3.0 (Build 1301 or earlier) via a maliciously crafted PDF file. It employs heap spraying via JavaScript to achieve universal exploitation and executes a calc.exe payload.
This Metasploit module exploits a stack-based buffer overflow in Foxit Reader 3.0 via a maliciously crafted PDF file with a Launch action. It achieves arbitrary code execution by overflowing the buffer with a payload and manipulating the return address.