Is CVE-2010-1239 being actively exploited?

CVE-2010-1239 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-1239?

CVE-2010-1239 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2010-1239

HIGH · CVSS 9.3EPSS 7.5%EU EUVD

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-94
EPSS score: 7.5% (95th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-1269)
Published: April 5, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-1269 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

foxitsoftware / foxit reader
foxitsoftware / foxit reader
foxitsoftware / foxit reader
foxitsoftware / foxit reader
foxitsoftware / foxit reader
foxitsoftware / foxit reader
foxitsoftware / foxit reader

References

http://blog.didierstevens.com/2010/03/29/escape-from-pdf/(Exploit)
http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/(Exploit)
http://www.f-secure.com/weblog/archives/00001923.html
http://www.foxitsoftware.com/announcements/2010420408.html(Patch, Vendor Advisory)
http://www.foxitsoftware.com/pdf/reader/security.htm#0401(Patch, Vendor Advisory)
http://www.kb.cert.org/vuls/id/570177(Patch, US Government Resource)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain