critical9.8
CVE-2018-21244
An issue was discovered in Foxit PhantomPDF before 8.3.6.
Impact
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Phantompdf | before 8.3.6 |