Software update: Foxit Reader 3.0 build 1817

Foxit Software has released a new version of Foxit Reader. With a download size of just a few megabytes, it’s a small and fast alternative to Adobe Reader, especially on an older computer with limited resources. The program is free, but for certain functionality, which is part of the so-called pro pack must be paid. Examples of this are saving as a text file and adding comments to a PDF file. This release fixes the following two security vulnerabilities:

Changes in version 3.0 build 1817:

• Fixed a problem related to negative stream offset (in malicious JPEG2000 stream) which caused reading data from an out-of-bound address. We have added guard codes to solve this issue.
• Fixed a problem related to error handling when decoding JPEG2000 header, an uncaught fatal error resulted a subsequent invalid address access. We added error handling code to terminate the decoding process.