PT-2016-5828 · Foxit · Foxit Reader+1

Jaanus · Publicado 2016-03-23 · Atualizado 2016-11-28 · CVE-2016-4059

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4

Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to execute arbitrary code. This is achieved through a crafted FlateDecode stream in a PDF document.

Recommendations For Foxit Reader versions prior to 7.3.4, update to version 7.3.4 or later. For PhantomPDF versions prior to 7.3.4, update to version 7.3.4 or later.

Correção

Identificadores relacionados

CVE-2016-4059

ZDI-16-221

Produtos afetados

Foxit Reader

Phantompdf

Referências · 6

• http://securityfocus.com/bid/85379 · Nota
• https://osv.dev/vulnerability/CVE-2016-4059 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4059 · Nota de Segurança
• https://foxitsoftware.com/support/security-bulletins.php · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-16-221 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-16-221 · Nota