full-disclosure - Re: Foxit Reader suffers from Division By Zero

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 30 Sep 2012 02:35:22 +0100
From: Nick Boyce <nick.boyce@...il.com>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Foxit Reader suffers from Division By Zero

On Sat, Sep 29, 2012 at 8:01 AM, kaveh ghaemmaghami
<kavehghaemmaghami@...glemail.com> wrote:

> Title            :  Foxit Reader suffers from Division By Zero
> Version          :  5.4.3.0920
[...]
> division by zero vulnerability during the handling of the pdf files.
> that will trigger a denial of service condition
[...]
> Proof of concept .pdf included.

Confirmed with V5 Foxit Reader 5.4.3.0920 on WinXP Pro SP3 (though
with a slightly different offset - 0015eb8c ... ASLR ?).

Interestingly, NOT confirmed for Foxit Reader 4.3.1.0323 (the last
version of the V4 Foxit Reader, which is the last version many people
are comfortable with); with this version I get a dialog box stating
"format error: not a PDF or corrupted", and no crash.  This is also on
XP Pro SP3.  Another reason to be disappointed with Foxit Reader V5 :)

Cheers
Nick Boyce
-- 
You are in a maze of twisty little relative jumps, all alike.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/