ByteOS Network

NVD Vulnerability Details :

CVE-2011-10030

Awaiting Analysis

Source-disclosure@vulncheck.com

Published At-20 Aug, 2025 | 16:15

Updated At-22 Aug, 2025 | 18:09

Foxit PDF Reader < 4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk. By embedding a malicious PDF that calls this API, an attacker can drop executables or scripts into privileged folders, leading to code execution the next time the system boots or the user logs in.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	8.4	HIGH	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-73	Secondary	disclosure@vulncheck.com

References

Hyperlink	Source	Resource
http://scarybeastsecurity.blogspot.com/2011/03/dangerous-file-write-bug-in-foxit-pdf.html	disclosure@vulncheck.com	N/A
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_reader_filewrite.rb	disclosure@vulncheck.com	N/A
https://www.exploit-db.com/exploits/16978	disclosure@vulncheck.com	N/A
https://www.foxit.com/pdf-reader/version-history.html	disclosure@vulncheck.com	N/A
https://www.vulncheck.com/advisories/foxit-pdf-reader-javascript-file-write	disclosure@vulncheck.com	N/A
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_reader_filewrite.rb	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A
https://scarybeastsecurity.blogspot.com/2011/03/dangerous-file-write-bug-in-foxit-pdf.html	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A
https://www.exploit-db.com/exploits/16978	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History