CVE-2017-5556
published 2017-01-23CVE-2017-5556: The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a…
high8.1CVSS 3.0
AVNACLPRNUIRSUCHINAH
The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | phantompdf | — | — |
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/95353http://www.zerodayinitiative.com/advisories/ZDI-17-039/https://www.foxitsoftware.com/support/security-bulletins.phphttp://www.securityfocus.com/bid/95353http://www.zerodayinitiative.com/advisories/ZDI-17-039/https://www.foxitsoftware.com/support/security-bulletins.php
2017-01-23
Published