Critical severity · published Aug 5, 2025
CVE-2013-10068
Foxit Reader <= 5.4.5.0114 Plugin URL Processing Buffer Overflow
9.4
CVSS
1.5%
EPSS
No
On KEV
Description
Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Foxit Reader · Foxit
through 5.4.5.0114 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-10068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-10068
raw.githubusercontent.com
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/foxit_reader_plugin_url_bof.rb
www.exploit-db.com
https://www.exploit-db.com/exploits/23944
www.exploit-db.com
https://www.exploit-db.com/exploits/24502
www.tenable.com
https://www.tenable.com/plugins/nessus/64094
www.vulncheck.com
https://www.vulncheck.com/advisories/foxit-reader-plugin-url-processing-buffer-overflow
More from Foxit Reader
8.8
CVE-2025-32451
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer
8.8
CVE-2024-49576
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object
8.8
CVE-2024-47810
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object
8.8
CVE-2018-11623
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049
8.8
CVE-2018-14241
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049