{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T03:34:14.455","vulnerabilities":[{"cve":{"id":"CVE-2010-20010","sourceIdentifier":"disclosure@vulncheck.com","published":"2025-08-20T17:15:33.023","lastModified":"2026-06-16T23:19:44.900","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file."},{"lang":"es","value":"Foxit PDF Reader anterior a la versión 4.2.0.0928 no realiza la comprobación de enlaces correcta de la entrada /Título en el diccionario de información del PDF. Un PDF especialmente manipulado con una cadena de título demasiado larga puede desbordar un búfer de pila de tamaño fijo, corromper la cadena del Gestor de Excepciones Estructuradas (SEH) y provocar la ejecución de código arbitrario en el contexto del usuario que abre el archivo."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Foxit Software","product":"Foxit PDF Reader","defaultStatus":"unaffected","modules":["PDF metadata parser (Info dictionary Title handling)"],"versions":[{"version":"0","lessThan":"4.2.0.0928","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-20T18:47:07.662516Z","id":"CVE-2010-20010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"references":[{"url":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_title_bof.rb","source":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/15514/","source":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/15532","source":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/16621","source":"disclosure@vulncheck.com"},{"url":"https://www.foxit.com/pdf-reader/version-history.html","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/foxit-pdf-reader-title-stack-buffer-overflow","source":"disclosure@vulncheck.com"}]}}]}