CERT mailing list archives

Current Activity - Foxit Releases Foxit Reader 3.3


From: Current Activity <us-cert () us-cert gov>
Date: Wed, 5 May 2010 09:10:17 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Foxit Releases Foxit Reader 3.3

Original release date: May 5, 2010 at 8:40 am
Last revised: May 5, 2010 at 8:40 am


The Foxit Corporation has released Foxit Reader 3.3 for Windows. This
release of Foxit Reader contains a component called Trust Manager.
Foxit Reader release notes indicate that the Trust Manager enables
users to allow or deny unauthorized actions and data transmission,
including URL connection, attachments PDF action, and JavaScript. This
addresses the vulnerability in the PDF specification /Launch function.

US-CERT encourages users and administrators to review the Foxit Reader
3.3 release notes and upgrade to Foxit Reader 3.3 to help mitigate the
risks associated with the PDF specification /Launch function
vulnerability. Additional information regarding the /Launch function
vulnerability can be found in the Vulnerability Notes Database.

Relevant Url(s):
<http://www.kb.cert.org/vuls/id/570177>

<http://www.foxitsoftware.com/pdf/reader/whatsnew33.htm>

====
This entry is available at
http://www.us-cert.gov/current/index.html#foxit_releases_foxit_reader_3

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBS+FuKj6pPKYJORa3AQJkXAf+IW00LPJ2DvvXK1CMdoGNX/qy2nkdDmJg
VjsdDukCVR2GyixONqjva9WCxbdVk/Bf4sl3fRMd8rKKHuanNquBTXZTEL2IAnj/
wKAsgIjtE2qcMagMcsILQ6YpYlJrutmbT6iT2CBvED0URTVcqJ6yGS2fOhC4LgRl
eNgJjOrEyuxt+UQzGVM5fS/3hbvdmGNfWdBf43X5A0BZNaThHHiHy/uiB2MuiW0H
MLFYMl9Hpb2ARuRFKXXN37OUy2Hrd3yR3JZfw8i4q1kpL7afQK7Fg9NOGciR63oC
Cl9FbPF/OM5t2oLHlyX1kpubcGbMZy1i1tzsm3n7HUBEQjfnByDtSQ==
=0Hy1
-----END PGP SIGNATURE-----


Current thread: