CVE-2010-1239
Foxit Reader < 3.2.1.0401 - Remote Code Execution via PDF Launch Action
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1239.
AI-analyzed exploit summary This is a technical writeup describing a PDF-based attack technique that uses a launch action to execute an embedded executable without exploiting a vulnerability. It leverages the PDF language specifications to trigger command execution, with varying behavior in Adobe Reader (user warning) and Foxit Reader (no warning).
Description
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.
Exploits (1)
This is a technical writeup describing a PDF-based attack technique that uses a launch action to execute an embedded executable without exploiting a vulnerability. It leverages the PDF language specifications to trigger command execution, with varying behavior in Adobe Reader (user warning) and Foxit Reader (no warning).