NetSight
IP …
medium4.3Public exploit code

CVE-2015-2790

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.

Affected products

VendorProductAffected versions
FoxitsoftwareEnterprise Reader
through 7.0.6.1126
FoxitsoftwareFoxit Reader
through 7.0.6.1126
FoxitsoftwarePhantompdf
through 7.0.6.1126

Weakness classification

CWE-20

References