Foxit Reader 5.4 Fixes Dll Hijacking Vulnerability

snoopy · Sep 11, 2012

Foxit Reader 5.4 fixes DLL hijacking vulnerability

Foxit Reader logo The recent 5.4 release of Foxit Software's proprietary PDF Reader addresses a DLL hijacking vulnerability that could be exploited by an attacker to compromise a victim's system. According to the company, previous versions of its software contained a security hole that allowed it to call and execute malicious code stored in an infected Dynamic Link Library (DLL) file.

For an attack to be successful, a victim must first open a PDF file in the same directory as a specially crafted version of a system DLL file. This could occur, for example, when an attacker publishes a PDF file on a WebDAV or SMB share and places the crafted DLL in the same shared folder. When the file is opened, Foxit is loaded and begins to load system libraries, but because of a programming oversight, it will first look for some of these libraries in the directory it loaded the PDF from. So a malicious DLL with the same name as a system library that is searched for can inject itself into the application and have its code executed.
Click to expand...

Read more here: http://www.h-online.com/security ews/item/Foxit-Reader-5-4-fixes-DLL-hijacking-vulnerability-1703878.html

Log in or Sign up

Foxit Reader 5.4 Fixes Dll Hijacking Vulnerability

snoopy Registered Members

Share This Page

Log in or Sign up

Foxit Reader 5.4 Fixes Dll Hijacking Vulnerability

snoopy Registered Members

Share This Page

Useful Searches