CVE-2011-0332

Published: Feb 25, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.

Affected (23)

Products: Foxitsoftware: Foxit Reader, Foxit Phantom

Foxitsoftware

2 products

Foxit Reader

Foxit Phantom

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Foxitsoftware Foxit Reader	Up to 4.3
Foxitsoftware Foxit Reader	Version 2.0
Foxitsoftware Foxit Reader	Version 2.2
Foxitsoftware Foxit Reader	Version 2.3
Foxitsoftware Foxit Reader	Version 3.0
Foxitsoftware Foxit Reader	Version 3.1.1
Foxitsoftware Foxit Reader	Version 3.1.3
Foxitsoftware Foxit Reader	Version 3.1.4
Foxitsoftware Foxit Reader	Version 3.1
Foxitsoftware Foxit Reader	Version 3.2.1
Foxitsoftware Foxit Reader	Version 3.2
Foxitsoftware Foxit Reader	Version 3.3.1
Foxitsoftware Foxit Reader	Version 4.0
Foxitsoftware Foxit Reader	Version 4.1.1

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Foxitsoftware Foxit Phantom	Up to 2.3
Foxitsoftware Foxit Phantom	Version 1.0.2
Foxitsoftware Foxit Phantom	Version 2.0
Foxitsoftware Foxit Phantom	Version 2.1.1
Foxitsoftware Foxit Phantom	Version 2.1
Foxitsoftware Foxit Phantom	Version 2.2.1
Foxitsoftware Foxit Phantom	Version 2.2.3
Foxitsoftware Foxit Phantom	Version 2.2.4
Foxitsoftware Foxit Phantom	Version 2.2