Denial of service and code execution vulnerability in Foxit Reader and Foxit PhantomPDF

Description

Out-of bounds read vulnerability was found in the ConvertToPDF plugin in Foxit Reader and PhantomPDF. By exploiting this vulnerability malicious users can cause a denial of service, possibly obtain sensitive information or execute arbitrary code in the context of the current process. This vulnerability can be exploited remotely via a specially designed JPEG image.

---

Technical details

Vulnerability can be executed only if gflags app is enabled.

Original advisories

• Foxit Security bulletins

Related products

• Foxit-Reader
• Foxit-Phantom-PDF

CVE list

• CVE-2017-5556
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com