high7.8
CVE-2017-8455
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execu…
Impact
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | through 8.2.0.2051 |
| Foxitsoftware | Phantompdf | through 8.2.0.2192 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98319
- http://www.zerodayinitiative.com/advisories/ZDI-17-140/
- https://www.foxitsoftware.com/support/security-bulletins.php
- http://www.securityfocus.com/bid/98319
- http://www.zerodayinitiative.com/advisories/ZDI-17-140/
- https://www.foxitsoftware.com/support/security-bulletins.php