certfr_avis - certa-2009-avi-252

CERTA-2009-AVI-252

Vulnerability from certfr_avis

Deux vulnérabilités permettant l'exécution de code arbitraire à distance ont été découvertes dans le convertisseur additionel JPEG2000/JBIG2 de Foxit Reader.

Description

Deux vulnérabilités ont été découvertes dans le convertisseur additionel JPEG2000/JBIG2 de Foxit Reader. L'exploitation de ces deux vulnérabilités permettent à un utilisateur malveillant d'exécuter du code arbitraire.

La version 3.0 de Foxit Reader contient par défaut ce convertisseur.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Foxit	PDF Reader	Foxit Reader 3.0 versions antérieures à la version 1817 ;
	Foxit	PDF Reader	Foxit Reader JPEG2000/JBIG2 decoder add-on 2.0 versions antérieures à la version 2009.616.

References

Title

Publication Time

Tags

Bulletin de mise à jour Foxit du 19 juin 2009	None	vendor-advisory
Bulletin de mise à jour Foxit Reader du 19 juin 2009 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Foxit Reader 3.0 versions ant\u00e9rieures \u00e0 la version 1817 ;",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    },
    {
      "description": "Foxit Reader JPEG2000/JBIG2 decoder add-on 2.0 versions ant\u00e9rieures \u00e0 la version 2009.616.",
      "product": {
        "name": "PDF Reader",
        "vendor": {
          "name": "Foxit",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le convertisseur additionel\nJPEG2000/JBIG2 de Foxit Reader. L\u0027exploitation de ces deux\nvuln\u00e9rabilit\u00e9s permettent \u00e0 un utilisateur malveillant d\u0027ex\u00e9cuter du\ncode arbitraire.\n\nLa version 3.0 de Foxit Reader contient par d\u00e9faut ce convertisseur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-0690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0690"
    },
    {
      "name": "CVE-2009-0691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0691"
    }
  ],
  "initial_release_date": "2009-06-24T00:00:00",
  "last_revision_date": "2009-06-24T00:00:00",
  "links": [
    {
      "title": "Bulletin de mise \u00e0 jour Foxit Reader du 19 juin 2009 :",
      "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
    }
  ],
  "reference": "CERTA-2009-AVI-252",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-06-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s permettant l\u0027ex\u00e9cution de code arbitraire \u00e0 distance\nont \u00e9t\u00e9 d\u00e9couvertes dans le convertisseur additionel JPEG2000/JBIG2 de\nFoxit Reader.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s du lecteur Foxit Reader",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de mise \u00e0 jour Foxit du 19 juin 2009",
      "url": null
    }
  ]
}

CVE-2009-0691 (GCVE-0-2009-0691)

Vulnerability from cvelistv5

Published

2009-06-23 21:21

Modified

2024-09-16 22:45

Severity ?

CWE

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.

References

URL

Tags

	http://www.foxitsoftware.com/pdf/reader/security.htm#0602	x_refsource_CONFIRM
	http://securitytracker.com/id?1022425	vdb-entry, x_refsource_SECTRACK
	http://www.kb.cert.org/vuls/id/251793	third-party-advisory, x_refsource_CERT-VN
	http://www.securityfocus.com/bid/35443	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/35512	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1640	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35443",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35443"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35443",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35443"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35443",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35443"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0691",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:45:23.805Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-0690 (GCVE-0-2009-0690)

Vulnerability from cvelistv5

Published

2009-06-23 21:21

Modified

2024-09-16 23:01

Severity ?

CWE

Summary

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read.

References

URL

Tags

	http://www.securityfocus.com/bid/35442	vdb-entry, x_refsource_BID
	http://www.foxitsoftware.com/pdf/reader/security.htm#0602	x_refsource_CONFIRM
	http://securitytracker.com/id?1022425	vdb-entry, x_refsource_SECTRACK
	http://www.kb.cert.org/vuls/id/251793	third-party-advisory, x_refsource_CERT-VN
	http://secunia.com/advisories/35512	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1640	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:48:51.281Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "35442",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35442"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
          },
          {
            "name": "1022425",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022425"
          },
          {
            "name": "VU#251793",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/251793"
          },
          {
            "name": "35512",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35512"
          },
          {
            "name": "ADV-2009-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1640"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-06-23T21:21:00.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "35442",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35442"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
        },
        {
          "name": "1022425",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022425"
        },
        {
          "name": "VU#251793",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/251793"
        },
        {
          "name": "35512",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35512"
        },
        {
          "name": "ADV-2009-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1640"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0690",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "35442",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35442"
            },
            {
              "name": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602",
              "refsource": "CONFIRM",
              "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#0602"
            },
            {
              "name": "1022425",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022425"
            },
            {
              "name": "VU#251793",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/251793"
            },
            {
              "name": "35512",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35512"
            },
            {
              "name": "ADV-2009-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1640"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0690",
    "datePublished": "2009-06-23T21:21:00.000Z",
    "dateReserved": "2009-02-22T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:01:54.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2009-AVI-252

Vulnerability from certfr_avis

Description

Solution

CVE-2009-0691 (GCVE-0-2009-0691)

Vulnerability from cvelistv5

CVE-2009-0690 (GCVE-0-2009-0690)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature