CVE-2015-8580

published 2015-12-16

CVE-2015-8580: Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2…

Priority P3 36 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	foxit_reader	<= 7.2.0.722	—
foxitsoftware	phantompdf	<= 7.2.0.722	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.