Exploitation Summary
EIP tracks 3 public exploits for CVE-2013-10068.
PoCs published by Metasploit, rgod, including Metasploit module exploits/windows/browser/foxit_reader_plugin_url_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Foxit Reader Plugin (npFoxitReaderPlugin.dll) via overly long query strings in URLs, leading to arbitrary code execution. It uses a ROP chain to bypass DEP and has been tested on Windows 7 SP1 with Firefox 18.0 and Foxit Reader 5.4.4.11281.
Description
Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Foxit Reader Plugin (npFoxitReaderPlugin.dll) via overly long query strings in URLs, leading to arbitrary code execution. It uses a ROP chain to bypass DEP and has been tested on Windows 7 SP1 with Firefox 18.0 and Foxit Reader 5.4.4.11281.
This PHP script exploits a stack-based buffer overflow in Foxit Reader's Firefox plugin (npFoxitReaderPlugin.dll) by sending an overlong query string, leading to arbitrary code execution. The PoC sets up a TCP server to serve a malicious PDF request, triggering the vulnerability.
This Metasploit module exploits a stack-based buffer overflow in Foxit Reader Plugin (npFoxitReaderPlugin.dll) via an overly long query string in a URL, leading to arbitrary code execution. It uses a ROP chain to bypass DEP and targets specific versions of Foxit Reader on Windows 7 with Firefox.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X