CVE-2011-1908

Published: Jun 24, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.

Affected (12)

Products: Foxitsoftware: Foxit Reader

Foxitsoftware

1 product

Foxit Reader

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Foxitsoftware Foxit Reader	Up to 4.0
Foxitsoftware Foxit Reader	Version 2.0
Foxitsoftware Foxit Reader	Version 2.2
Foxitsoftware Foxit Reader	Version 2.3
Foxitsoftware Foxit Reader	Version 3.0
Foxitsoftware Foxit Reader	Version 3.1.1
Foxitsoftware Foxit Reader	Version 3.1.3
Foxitsoftware Foxit Reader	Version 3.1.4
Foxitsoftware Foxit Reader	Version 3.1
Foxitsoftware Foxit Reader	Version 3.2.1
Foxitsoftware Foxit Reader	Version 3.2
Foxitsoftware Foxit Reader	Version 3.3.1