{"id":"CVE-2008-1104","published":"2008-05-21T10:00:00Z","modified":"2024-08-07T08:08:57Z","title":"Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute…","vendor":null,"product":null,"tier":"tail","description":{"text":"Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.22693,"percentile":0.97716,"provenance":"source"},"cwes":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42531","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/archive/1/492289/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securitytracker.com/id?1020050","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.kb.cert.org/vuls/id/119747","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.vupen.com/english/advisories/2008/1572","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/secunia_research/2008-18/advisory/","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/29288","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/29941","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://securityreason.com/securityalert/3899","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","tags":["x_refsource_CONFIRM"]}],"priority":{"score":19.5,"factors":[{"name":"EPSS percentile","points":19.54}]},"euvd":{"id":"EUVD-2008-1113","exploited":false,"provenance":"source"},"lineage":{"children":[{"from":"CVE-2008-1104","to":"CVE-2008-2992","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…verflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.","from":"NVD","in":"CVE-2008-2992"}]}]}}