Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) via crafted .pdf file.
References
| Link | Resource |
|---|---|
| http://foxit.com | Product |
| https://www.foxitsoftware.com/support/security-bulletins.php | Vendor Advisory |
| http://foxit.com | Product |
| https://www.foxitsoftware.com/support/security-bulletins.php | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://foxit.com - Product | |
| References | () https://www.foxitsoftware.com/support/security-bulletins.php - Vendor Advisory |
17 Aug 2023, 01:57
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:* | |
| References | (MISC) http://foxit.com - Product | |
| References | (MISC) https://www.foxitsoftware.com/support/security-bulletins.php - Vendor Advisory |
11 Aug 2023, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-11 14:15
Updated : 2024-11-21 05:28
NVD link : CVE-2020-35990
Mitre link : CVE-2020-35990
CVE.ORG link : CVE-2020-35990
JSON object : View
Products Affected
foxit
- pdf_reader
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')