CVE-2013-10068 CRITICAL

CVE-2013-10068: Foxit Reader <= 5.4.5.0114 Plugin URL Processing Buffer Overflow

Vendor Foxit
Product Foxit Reader
Weakness CWE-121
Published August 5, 2025
Last update May 25, 2026

CVSS base score

9.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code.

Key dates

02Disclosure timeline

August 5, 2025 CVE published
May 25, 2026 Record updated