The host is installed with Foxit Reader and is prone to arbitrary command execution vulnerability.

Successful exploitation will let attacker to execute arbitrary code or crash an affected application. Impact Level: Application

Upgrade to the version 3.2.1.0401 or later, For updates refer to http://www.foxitsoftware.com/downloads/

The flaw exists due to error in hadling 'PDF' files which runs executable embedded program inside a PDF automatically without asking for user permission.

Foxit Reader version prior to 3.2.1.0401

• http://blog.didierstevens.com/2010/03/29/escape-from-pdf/
• http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/
• http://www.foxitsoftware.com/pdf/reader/security.htm#0401
• http://www.kb.cert.org/vuls/id/570177

---

Updated on 2015-03-25