CVE-2012-4337

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-23 · updated 2026-06-16

Description

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references.

Affected products

Foxit Reader: through 5.1.4.0104; 2.0, 2.3, 3.0, 3.1.2.1013, 3.1.2.1030, 3.2.0.0303 (+12)

References

http://secunia.com/advisories/50359
http://securitytracker.com/id?1027424
http://technet.microsoft.com/security/msvr/msvr12-013
http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php
http://www.osvdb.org/84808
http://www.securityfocus.com/bid/55150
http://secunia.com/advisories/50359
http://securitytracker.com/id?1027424
http://technet.microsoft.com/security/msvr/msvr12-013
http://www.foxitsoftware.com/Secure_PDF_Reader/security_bulletins.php
http://www.osvdb.org/84808
http://www.securityfocus.com/bid/55150

Get alerted when CVE-2012-4337 or the next vulnerability affects your stack