medium4.7
CVE-2017-6883
The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a…
Impact
The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | through 8.2.0.2051 |
| Foxitsoftware | Phantompdf | through 8.2.0.2192 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96870
- http://www.zerodayinitiative.com/advisories/ZDI-17-133/
- https://www.foxitsoftware.com/support/security-bulletins.php
- http://www.securityfocus.com/bid/96870
- http://www.zerodayinitiative.com/advisories/ZDI-17-133/
- https://www.foxitsoftware.com/support/security-bulletins.php