critical9.8
CVE-2018-17610
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann…
Impact
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Phantompdf | before 9.3 |
| Foxitsoftware | Reader | before 9.3 |