CVE-2009-0837: Foxit READER3.0

High severity, CVSS 10.0. EPSS: 75.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action.

Affected products

• Foxit READER3.0: any version

Published 2009-03-10. Last modified 2026-06-16.