CVE-2017-8455

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*
cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:34

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/98319 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/98319 - Third Party Advisory, VDB Entry
References () http://www.zerodayinitiative.com/advisories/ZDI-17-140/ - Third Party Advisory, VDB Entry () http://www.zerodayinitiative.com/advisories/ZDI-17-140/ - Third Party Advisory, VDB Entry
References () https://www.foxitsoftware.com/support/security-bulletins.php - Patch, Vendor Advisory () https://www.foxitsoftware.com/support/security-bulletins.php - Patch, Vendor Advisory

Information

Published : 2017-05-03 05:59

Updated : 2024-11-21 03:34


NVD link : CVE-2017-8455

Mitre link : CVE-2017-8455

CVE.ORG link : CVE-2017-8455


JSON object : View

Products Affected

foxitsoftware

  • phantompdf
  • foxit_reader
CWE
CWE-125

Out-of-bounds Read