CVE-2010-20010
HIGHFoxit PDF Reader < 4.2.0.0928 - Stack-based Buffer Overflow via PDF Info Title Entry
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2010-20010.
PoCs published by Metasploit, sud0, dookie, including Metasploit module exploits/windows/fileformat/foxit_title_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Foxit PDF Reader v4.1.1 by crafting a malformed PDF with an overly long Title field, leading to SEH overwrite and arbitrary code execution via an egghunter and encoded payload.
Description
Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in Foxit PDF Reader v4.1.1 by crafting a malformed PDF with an overly long Title field, leading to SEH overwrite and arbitrary code execution via an egghunter and encoded payload.
This exploit targets a buffer overflow vulnerability in Foxit Reader 4.1.1, leveraging a crafted PDF header to overwrite EIP/SEH for arbitrary code execution. The PoC includes a large header designed to trigger the vulnerability and is based on prior research from Corelan Security Team.
This exploit targets a stack overflow vulnerability in Foxit Reader 4.1.1, where an overly long Unicode title causes an SEH overwrite. The PoC requires the exception to be passed twice to reach the overwritten handler, demonstrating a classic stack-based buffer overflow leading to potential arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in Foxit PDF Reader v4.1.1 by crafting a malformed PDF with an overly long Title field, overwriting SEH records to achieve remote code execution. It uses an egghunter and alphanumeric encoding to bypass bad character restrictions.
References (6)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N