This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Foxit Reader advisories/updates

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

Foxit Reader vuln - update available
- http://secunia.com/advisories/29941/
Release Date: 2008-05-20
Critical: Highly critical
Impact: System access
Where: From remote
…The vulnerability is confirmed in version 2.3 build 2825. Other versions may also be affected.Solution:
The vulnerability is fixed in upcoming version 2.3 build 2912.

- http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm
Foxit Reader 2.3 for Windows
Last Updated: 2008-05-23
OS: 98/ME/2000/XP/2003/Vista
Version: 2.3 Build 2923
FYI…

Foxit Reader V2.3 Build 3309
- http://www.foxitsoftware.com/preview.php?announceid=58
Bug-fixed Release / September 17, 2008
…This version has fixed some major bugs of the early versions and provides some minor enhancements listed below:
. Compatibility issues with Foxit Reader and Adobe Reader after saving.
. Disappearing Toolbar after minimizing Foxit Reader to the system tray…
- http://www.foxitsoftware.com/pdf/reader_2/bugfix.htm

- http://www.foxitsoftware.com/downloads/

:ph34r:
FYI…

Foxit Reader v3.0 Build 1120 released
- http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm
Foxit Reader 3.0 for Windows (Installer: .exe, 3.68 MB)
Last Updated: 2008-11-20
OS: ME/2000/XP/2003/Vista
Version: 3.0 Build 1120

What's new in 3.0
- http://www.foxitsoftware.com/pdf/reader_2/whatsnew30.htm

Fixed in Foxit Reader 3.0 Build 1120
- http://www.foxitsoftware.com/pdf/reader_2/bugfix.htm
1. Cannot open PDF files embedded in MSWord.
2. Cannot open the links to PDF files in a PDF with IE.
3. The print command is inconsistent with the one specified in registry.
4. Cannot align typewriter annotations.
5. New popup notes will not be active, unless users click on it when they use the note tool to make annotations.
6. Users are still able to drag a callout when they click and drag a place which is nowhere in the area of the callout’s visible element, but in the rectangular region bound by those elements.
7. The mouse cursor while in highlight mode has just one shape, which stays the same whenever it is used to select row by row.
8. When the cursor is on the blank margin you cannot scroll page (while annotations is activated) by scrolling the mouse wheel.
9. Cannot open PDF files with extension .FDF.
10. Setting a new default author and subject for the Note Tool will not be recalled.
11. There are no property toolbars available to set colors and opacity…

//
FYI…

Foxit Reader v3.0 Build 1222 released
- http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm
Foxit Reader 3.0 for Windows
Last Updated: 2008-12-25
OS: Windows 2000/XP/2003/Vista
Version: 3.0 Build 1222

- http://www.foxitsoftware.com/pdf/reader_2/bugfix.htm
Fixed in Foxit Reader 3.0 Build 1222
1. The annotations added by the typewriter tool will be rotated along with the page.
2. Popup "Mozilla Firefox is not installed." when users failed to install Firefox plug-in.
3. May take a long time to open a file in Windows Vista Home version.
4. This updated version allows users to delete the advertisements.
5. The Auto-Rotate feature may be unavailable when printing with Snapshot tool.
6. Go back to the default settings of the printer properties when users reopen the PDF files.
7. This updated version will choose to print documents in actual size mode or fit to paper mode based on the default settings in the print dialog box with Command lines.
8. Page numbers are printed in a disorderly way when printing multiple copies in double-side mode.
9. The slow launch speed when running Foxit Reader for the first time after the system startup.

:oops:
FYI…

Foxit Reader 3.0 Build 1301 released
- http://www.foxitsoftware.com/pdf/reader_2/down_reader.htm
Last Updated: 2009-01-01
OS: Windows 2000/XP/2003/Vista
Version: 3.0 Build 1301

Fixed in Foxit Reader 3.0 Build 1301
- http://www.foxitsoftware.com/pdf/reader_2/bugfix.htm
A dead loop error appears when printing pages or a range of pages by entering 1, 3, 7-10, etc. in the Pages text box within the Print dialog box.
Symptoms: If you print pages or a range of pages by entering 1, 3, 7-10, etc. in the Pages text box within the Print dialog box with Foxit Reader 3.0 Build 1222, the printing doesn’t stop.

NOTES:
1. After installing this update, the FoxIt PDF reader plug-in with Firefox v3.0.5 no longer worked - hmmm - disabled the plugin, and it worked! Workaround: leave it disabled. YMMV. 'Appears someone got their 1's and 0's mixed up.
2. More issues with this build: If other add-on/plugins have been disabled, this plugin causes -other- plugins to re-enable themselves (?)…

:scratch: :huh:
FYI…

Foxit Reader multiple vulns - update available
- http://secunia.com/advisories/34036/2/
Release Date: 2009-03-09
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: Foxit Reader 2.x, Foxit Reader 3.x
…This vulnerability is confirmed in version 3.0.2009.1301 and reported in versions 2.3 and 3.0. Successful exploitation of the vulnerabilities may allow execution of arbitrary code…
Solution: Update to version 3.0 Build 1506 or version 2.3 Build 3902 * …
Original Advisory: Foxit Software: http://www.foxitsoftware.com/pdf/reader/security.htm
Release Date: Mar. 9, 2009
Stack-based Buffer Overflow in Foxit Reader 3.0
Security Authorization Bypass in Foxit Reader 2.3 and 3.0
JBIG2 Symbol Dictionary Processing in Foxit Reader 2.3 and 3.0…
2009-03-09: Foxit released fixed version 3.0 Build 1506…
Secunia Research: http://secunia.com/secunia_research/2009-11/
CVE reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0191

* http://www.foxitsoftware.com/downloads/
Last Updated: 2009-03-09
OS: Windows 2000/XP/2003/Vista

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-0837

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-0836

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-0191

:ph34r:
FYI…

Foxit Reader vuln - update available
- http://secunia.com/advisories/35512/2/
Release Date: 2009-06-22
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: Foxit Reader JPEG2000/JBIG Decoder Add-On 2.x
Solution: Update to version 2.0 Build 2009.616.
http://www.foxitsoftware.com/downloads/add…r2.0.20096.html
Original Advisory: US-CERT VU#251793:
http://www.kb.cert.org/vuls/id/251793
"…This issue is addressed in Foxit Reader 3.0 Build 1817 …"
Foxit Software:
http://www.foxitsoftware.com/pdf/reader/security.htm#0602

- http://www.foxitsoftware.com/downloads/
Foxit Reader 3.0 Build 1817(exe) 3.57MB 06/19/09
JPEG2000/JBIG Decoder 2.0 Build 2009.616(fzip) 169KB 06/19/09

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0690
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0691

-OR-
From an Admin account >Start Foxit Reader >Help >Check for Updates (select/add) …Build 1817 …Install

:ph34r:
FYI…

Foxit Reader v3.1.1.0901 released
- http://www.foxitsoftware.com/pdf/reader/bugfix.htm
Fixed in Foxit Reader 3.1.1.0901
1. The reported issue of Foxit Reader 3.1.0.0824 crashing when users are viewing certain PDF files has been updated and is no longer a problem.
2. Fixed an issue where Foxit Reader may not be launched in the system without installing Microsoft Visual C++ 2005 Redistributable.

- http://www.foxitsoftware.com/downloads/index.php
Foxit Reader 3.1.1.0901(exe) - 5.05 MB - 09/03/09
-OR-
From an Admin account >Start Foxit Reader >Help >Check for Updates (select/add) …FoxIt Reader 3.1.1.0901 Upgrade …Install

:ph34r:
FYI…

Foxit PDF Reader Firefox Plugin Memory Corruption vuln
- http://secunia.com/advisories/37049/2/
Release Date: 2009-10-15
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched * (?)
Software: Foxit Reader 3.x …
Solution: Do not visit untrusted websites or follow untrusted links.
Disable the Foxit Reader plugin in Firefox.
Original Advisory: http://seclists.org/fulldisclosure/2009/Oct/198
14 Oct 2009 - "It would appear that Foxit reader version 3.1.1.0928 is also vulnerable to this memory corruption flaw. Foxit reader was also vulnerable to the JPEG2000/JBIG2 decoder bug…"
Other References: SA36983: http://secunia.com/advisories/36983/2/

* http://www.foxitsoftware.com/pdf/reader/bugfix.htm
Fixed in Foxit Reader 3.1.2.1013: Fix the memory leak issue where the memory usage will continuously grow while viewing PDF files with Foxit Reader.
- http://www.foxitsoftware.com/downloads/index.php
Foxit Reader 3.1.2.1013(exe) 5.06 MB - 10/13/09

:ph34r:
FYI…

Foxit Reader v3.1.3.1030 released
- http://www.foxitsoftware.com/pdf/reader/bugfix.htm
11/5/09 - "Fixed in Foxit Reader 3.1.3.1030:
Fixed the issue in Foxit Reader 3.1.2.1013, where the text in PDF documents cannot be printed with specific printers."
(Update is also available through the "Check for Updates" function of the Foxit Reader.)

- http://secunia.com/advisories/37049/2/
Last Update: 2009-11-18
Solution: Update to version 3.1.3.1030 and install the latest Firefox Plugin via the internal update mechanism…

:ph34r:
FYI…

Foxit Reader v3.1.4 released
- http://www.foxitsoftware.com/downloads/index.php
11/26/09

Fixed in Foxit Reader 3.1.4
- http://www.foxitsoftware.com/pdf/reader/bugfix.htm
1. Now supports opening files containing special Unicode characters in filenames.
2. Right-clicking the annotation with zoom tool will not popup annotation menu.
3. When using the Commenting Tools, the color indicator will reflect your color selection.
4. Now supports simultaneous viewing of multiple documents.
5. Fixed the issue where some files display slowly in the print preview window.
6. Fixed the issue where some pdf files cannot be opened in the correct positions.

11.30.2009 - Update is now available through the "Check for Updates" function of the Foxit Reader.

:blink: