CVE-2010-1239

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.

• CWE-94

• http://blog.didierstevens.com/2010/03/29/escape-from-pdf/Exploit
• http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/Exploit
• http://www.f-secure.com/weblog/archives/00001923.html
• http://www.foxitsoftware.com/announcements/2010420408.htmlPatch, Vendor Advisory
• http://www.foxitsoftware.com/pdf/reader/security.htm#0401Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/570177Patch, US Government Resource
• http://blog.didierstevens.com/2010/03/29/escape-from-pdf/Exploit
• http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/Exploit
• http://www.f-secure.com/weblog/archives/00001923.html
• http://www.foxitsoftware.com/announcements/2010420408.htmlPatch, Vendor Advisory
• http://www.foxitsoftware.com/pdf/reader/security.htm#0401Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/570177Patch, US Government Resource

Published

Apr 5, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1233Multiple integer overflows in Google Chrome before 4.1.249.1…
• CVE-2010-1234Unspecified vulnerability in Google Chrome before 4.1.249.10…
• CVE-2010-1235Unspecified vulnerability in Google Chrome before 4.1.249.10…
• CVE-2010-1236The protocolIs function in platform/KURLGoogle.cpp in WebCor…
• CVE-2010-1237Google Chrome 4.1 BETA before 4.1.249.1036 allows remote att…
• CVE-2010-1238MoinMoin 1.7.1 allows remote attackers to bypass the textcha…
• CVE-2010-1240Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.…
• CVE-2010-1241Heap-based buffer overflow in the custom heap management sys…
• CVE-2010-1242Multiple cross-site scripting (XSS) vulnerabilities in the I…
• CVE-2010-1243The IBM Web Interface for Content Management (aka WEBi) befo…
• CVE-2010-1244Cross-site request forgery (CSRF) vulnerability in createDes…
• CVE-2010-1245Unspecified vulnerability in Microsoft Office Excel 2002 SP3…