Secunia

Description
A vulnerability has been discovered in Foxit Reader, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error in the Foxit Reader plugin for Firefox (npFoxitReaderPlugin.dll). This can be exploited to trigger a memory corruption by tricking a user into visiting a specially crafted web page which repeatedly loads and unloads the plugin.

Successful exploitation may allow execution of arbitrary code.

This is related to vulnerability #12 in:
SA36983

The vulnerability is confirmed with Foxit Reader version 3.1.2.1013 and Mozilla Firefox 3.5.3. Other versions may also be affected.

Solution
Update to version 3.1.3.1030 and install the latest Firefox Plugin via the internal update mechanism.

Provided and/or discovered by
Originally discovered in Adobe Reader by SkyLined.

Reported in Foxit Reader by MrX.

Changelog
Further details available in Customer Area

Original Advisory
http://seclists.org/fulldisclosure/2009/Oct/198

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area