KLA10948
Denial of service and code execution vulnerability in Foxit Reader and Foxit PhantomPDF

Out-of bounds read vulnerability was found in the ConvertToPDF plugin in Foxit Reader and PhantomPDF. By exploiting this vulnerability malicious users can cause a denial of service, possibly obtain sensitive information or execute arbitrary code in the context of the current process. This vulnerability can be exploited remotely via a specially designed JPEG image.

Technical details

Vulnerability can be executed only if gflags app is enabled.

Foxit Reader before 8.2
Foxit PhantomPDF before 8.2

Update to the latest versions
Download Foxit PhantomPDF
Download Foxit Reader

Foxit Security bulletins