CVE:CVE-2009-0690
CNNVD:CNNVD-200906-366
Foxit Reader是一款小型的PDF文档查看器和打印程序 。
Foxit Reader在处理JPX(JPEG2000)流时存在内存破坏漏洞。如果恶意的JPEG2000流中设置了负数的流偏移，就会越界读取数据；此外在解码JPEG2000头时的错误还会导致无效的地址访问 。
solution:Upgrade foxitsoftware foxit_reader to a higher version than 3.0,3.0.2009.1301,and avoid the version 3.0,3.0.2009.1301; Upgrade foxitsoftware jpeg2000/jbig2_decoder_add-on to a higher version than 2.0.2009.303,and avoid the version 2.0.2009.303