CVE-2015-8580

published 2015-12-16

CVE-2015-8580: Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	foxit_reader	<= 7.2.0.722	—
foxitsoftware	phantompdf	<= 7.2.0.722	—