CVE-2018-17781

published 2018-09-29

CVE-2018-17781: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	phantompdf	<= 9.2.0.9297	—
foxitsoftware	reader	<= 9.2.0.9297	—

CWE-200