Denial of service and code execution vulnerability in Foxit Reader and Foxit PhantomPDF

Beschreibung

Out-of bounds read vulnerability was found in the ConvertToPDF plugin in Foxit Reader and PhantomPDF. By exploiting this vulnerability malicious users can cause a denial of service, possibly obtain sensitive information or execute arbitrary code in the context of the current process. This vulnerability can be exploited remotely via a specially designed JPEG image.

---

Technical details

Vulnerability can be executed only if gflags app is enabled.

Ursprüngliche Informationshinweise

• Foxit Security bulletins

CVE Liste

• CVE-2017-5556
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com