📎 AI Summary:
The thread discusses Foxit Software releasing FoxitReader 5.0.2 to fix two vulnerabilities that could lead to remote code execution, including one caused by a boundary error in the FoxitReaderOCX ActiveX control when handling the OpenFile method. The key concern is how the flaw could be exploited (via a maliciously crafted PDF), and whether installing the update is the appropriate mitigation. Overall sentiment is alert and cautionary, reflecting typical security-update awareness rather than controversy.

JMH

Senior Member
Member details
Joined
Sep 21, 2010
Messages
361
Thread Author #1
Foxit Software has released version 5.0.2 of its PDF reader program in order to address two vulnerabilities that can result in remote code execution of arbitrary code.

One of the vulnerabilities was discovered by Dmitriy Pletnev of Secunia and can be exploited by tricking the victim into opening a maliciously-crafted PDF file.

​
"The vulnerability is caused due to a boundary error in the FoxitReaderOCX ActiveX control when processing the 'OpenFile()' method.

Link Removed - Invalid URL