CVE-2009-0191 - Vulnerability Details - OpenCVE

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00961.

Key SSVC decision points have not yet been added.

Vendors	Products
Foxitsoftware	Foxit Reader

Configuration 1 [-]

OR	cpe:2.3:a:foxitsoftware:foxit_reader:2.3:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:3.0:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2009-0200	Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/34036
http://secunia.com/secunia_research/2009-11/
http://www.foxitsoftware.com/pdf/reader/security.htm#Processing
http://www.securityfocus.com/archive/1/501590/100/0/threaded
http://www.securityfocus.com/bid/34035
http://www.securitytracker.com/id?1021822
http://www.vupen.com/english/advisories/2009/0634
https://exchange.xforce.ibmcloud.com/vulnerabilities/49135

History

No history.

MITRE

Status: PUBLISHED

Assigner: flexera

Published: 2009-03-10T20:00:00

Updated: 2024-08-07T04:24:18.254Z

Reserved: 2009-01-20T00:00:00

Link: CVE-2009-0191

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-03-10T20:30:06.547

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-0191

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-09T00:00:00", "descriptions": [{"lang": "en", "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-11T19:57:01", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "foxitreader-jbig2-code-execution(49135)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"}, {"name": "1021822", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1021822"}, {"name": "34036", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34036"}, {"name": "ADV-2009-0634", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0634"}, {"name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"}, {"name": "34035", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34035"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2009-11/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2009-0191", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "foxitreader-jbig2-code-execution(49135)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"}, {"name": "1021822", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1021822"}, {"name": "34036", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34036"}, {"name": "ADV-2009-0634", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0634"}, {"name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"}, {"name": "34035", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34035"}, {"name": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing", "refsource": "CONFIRM", "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"}, {"name": "http://secunia.com/secunia_research/2009-11/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2009-11/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:24:18.254Z"}, "title": "CVE Program Container", "references": [{"name": "foxitreader-jbig2-code-execution(49135)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"}, {"name": "1021822", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1021822"}, {"name": "34036", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34036"}, {"name": "ADV-2009-0634", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0634"}, {"name": "20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"}, {"name": "34035", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34035"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2009-11/"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2009-0191", "datePublished": "2009-03-10T20:00:00", "dateReserved": "2009-01-20T00:00:00", "dateUpdated": "2024-08-07T04:24:18.254Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "C133A953-B2F9-4168-8E00-91254ADC5C0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "30CB7169-357B-42FB-B680-044883A8D9D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*", "matchCriteriaId": "913B8A86-09E0-4213-9111-6645064879C6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."}, {"lang": "es", "value": "Foxit Reader v2.3 anterior a Build 3902 y v3.0 anterior a Build 1506, ademas de v3.0.2009.1301, no maneja adecuadamente un segmento del s\u00edmbolo JBIG2 del diccionario sin nuevos s\u00edmbolos, lo que permite atacantes remotos ejecutar c\u00f3digo arbitrariamente a trav\u00e9s de un fichero PDF manipulado que inicia una desreferencia y una localizaci\u00f3n de memoria no inicializada."}], "id": "CVE-2009-0191", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2009-03-10T20:30:06.547", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34036"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2009-11/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/34035"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securitytracker.com/id?1021822"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/0634"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34036"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2009-11/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.foxitsoftware.com/pdf/reader/security.htm#Processing"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/501590/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/34035"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1021822"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/0634"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49135"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}