CVE-2019-5007

published 2019-01-03

CVE-2019-5007: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL…

high 7.1 CVSS 3.0

AV L AC L PR N UI R S U C H I N A H

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	foxit_reader	< 9.4	9.4
foxitsoftware	phantompdf	< 9.4	9.4

CWE-125 CWE-476