full-disclosure - Foxit Reader vulnerability has been fixed

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200911191536096708516@foxitsoftware.com>
Date: Thu, 19 Nov 2009 15:36:12 +0800
From: "Grace C. Wu" <grace@...itsoftware.com>
To: "full-disclosure" <full-disclosure@...ts.grok.org.uk>
Subject: Foxit Reader vulnerability has been fixed

Hello There,

This is Grace Wu from Foxit Corporation. We had noticed the Foxit Reader vulnerability posted at http://seclists.org/fulldisclosure/2009/Oct/198. By working with Alin from Secunia.com, Foxit development team has fixed this crash issue and provided the below solution today. Secunia.com has confirmed the issue has been fixed and posted the release of the patch today at http://secunia.com/advisories/37049/.

Solution:
Update to version 3.1.3.1030 and install the latest Firefox Plugin via the internal update mechanism.

Can you please confirm this and help to post this solution on your site too so users who're reading this post http://seclists.org/fulldisclosure/2009/Oct/198 will know this issue has been fixed? 

Thank you so much!

Grace Wu
Foxit Corporation
www.foxitsoftware.com

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/