CVE-2008-1104: Foxitsoftware Foxit Reader

High severity, CVSS 9.3. EPSS: 22.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.

Affected products

• Foxitsoftware Foxit Reader: up to and including 2.3; version 2.0 only; version 2.2 only

Published 2008-05-21. Last modified 2026-06-16.