CVE-2015-2790

published 2015-03-30

CVE-2015-2790: Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1)…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I N A P

EXPLOIT

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	enterprise_reader	<= 7.0.6.1126	—
foxitsoftware	foxit_reader	<= 7.0.6.1126	—
foxitsoftware	phantompdf	<= 7.0.6.1126	—

CWE-20