high8.8
CVE-2020-12248
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty …
Impact
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Phantompdf | through 9.7.2.29539 through 10.0.0.35798 |
| Foxitsoftware | Reader | through 10.0.0.35798 |