Javier Vicente Vallejo has discovered two vulnerabilities in Foxit Reader, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to errors within the processing of PDF files and can be exploited via a PDF file containing a specially crafted PDF XObject or ExtGState.

Successful exploitation may potentially allow execution of arbitrary code when opening a malicious PDF file.

The vulnerabilities are confirmed in version 2.2. Other versions may also be affected.

Solution
Update to version 2.3 Build 2825, which partially fixes the vulnerabilities.

Provided and/or discovered by
Javier Vicente Vallejo

Changelog
Further details available in Customer Area

Original Advisory
http://www.vallejo.cc/proyectos/foxitreader1.htm
http://www.vallejo.cc/proyectos/foxitreader2.htm

Deep Links
Links available in Customer Area