CVE-2010-1239

Description

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.

Weakness classification

• CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Patch, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, US Government Resource