Foxit Reader JPEG2000/JBIG Decoder Add-On Vulnerability

Secunia ID	SA35512
CVE-ID	CVE-2009-0690, CVE-2009-0691
Release Date	22 Jun 2009
Criticality	Highly Critical
Solution Status	Vendor Patch
Software	Foxit Reader JPEG2000/JBIG Decoder Add-On 2.x
Where	From remote
Impact	System access This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.
Description	Will Dormann has discovered a vulnerability in the JPEG2000/JBIG Decoder add-on for Foxit Reader, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error when parsing boxes in a JPEG 2000 stream and can be exploited to cause a heap-based buffer overflow via a PDF file containing a specially crafted JPEG 2000 image. Successful exploitation may allow execution of arbitrary code. The vulnerability is confirmed in version 2.0 Build 2009.303. Other versions may also be affected.
Solution	Update to version 2.0 Build 2009.616. http://www.foxitsoftware.com/downloads/addons/jpg_decoder2.0.20096.html
Reported by	Will Dormann, CERT/CC.
Original Advisory	US-CERT VU#251793: http://www.kb.cert.org/vuls/id/251793 Foxit Software: http://www.foxitsoftware.com/pdf/reader/security.htm#0602

© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.