high7.1
CVE-2020-12247
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text…
Impact
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Phantompdf | through 9.7.2.29539 through 10.0.0.35798 |
| Foxitsoftware | Reader | through 10.0.0.35798 |