CVE		CVE-2009-0191
Status		UNKNOWN
Description		Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.
Severity		High
CVSS score		9,3
CVSS vector		(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Phase		ASSIGNED (21.03.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0191
References		BID : 34035
		BUGTRAQ : 20090309 Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability
		CONFIRM : http://www.foxitsoftware.com/pdf/reader/security.h...
		MISC : http://secunia.com/secunia_research/2009-11/
		SECTRACK : 1021822
		SECUNIA : 34036
		VUPEN : ADV-2009-0634
		XF : foxitreader-jbig2-code-execution(49135)
SecurityVulns:		FoxIT Reader multiple security vulnerabilities