high7.5
CVE-2018-17781
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataVi…
Impact
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Phantompdf | through 9.2.0.9297 |
| Foxitsoftware | Reader | through 9.2.0.9297 |