The Register® — Biting the hand that feeds IT

Feeds

Foxit outfoxes fiendish flaw to fix foxed-up Firefox PDF plugin

  • alert
  • print

Buffer-boundary bashing bug blatted

By John Leyden • Get more from this author

Posted in Cloud, 22nd January 2013 10:32 GMT

Watch Now : Virtual Machine Movement with Hyper-V

Foxit Software has fixed a critical security hole in its PDF plugin for web browsers.

A bug in the code allowed overly long URLs in web links to crash the utility - billed as a "better" alternative to Adobe's software - or potentially inject malicious code into vulnerable Windows systems. The stack-based buffer overflow flaw is present in versions 5.4.4 and earlier of the software.

Users of the PDF-viewing plugin are advised to update to version 5.4.5 as explained in an advisory by Foxit. The company credits Danish security notification firm Secunia and Core Security Technologies for finding and confirming the issue in the Firefox build of the software, respectively. ®

Watch Now : Virtual Machine Movement with Hyper-V

Hands on with Hyper-V 3.0 and virtual machine movement

Our award-winning Regcasts have teamed up with training provider QA for the deepest of deep dives into Hyper-V, including a live demo.

Understand VM movement - just click to play, or go here for a bigger version.