PT-2015-3027 · Foxit · Foxit Phantompdf+1
Abdulaziz Hariri
·
Publicado
2015-12-08
·
Atualizado
2016-11-08
·
CVE-2015-8580
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Foxit PhantomPDF versions prior to 7.2.2
Foxit Reader versions prior to 7.2.2
Description
The issue is related to multiple use-after-free vulnerabilities in the Print method and App object handling of Foxit PhantomPDF and Foxit Reader. These vulnerabilities can be exploited by a remote attacker using a specially crafted PDF document, potentially allowing the execution of arbitrary code.
Recommendations
For Foxit PhantomPDF versions prior to 7.2.2, update to version 7.2.2 or later to resolve the issue.
For Foxit Reader versions prior to 7.2.2, update to version 7.2.2 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of the Print method and App object handling in Foxit PhantomPDF and Foxit Reader until a patch is available.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Foxit Phantompdf
Foxit Reader