PT-2020-10786 · Foxit · Foxit Reader+1

Published 2020-06-04 · Updated 2020-06-10 · CVE-2019-20822

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.0.29430

Description An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF. It has an out-of-bounds write via incorrect image data.

Recommendations For versions prior to 9.7.0.29430, update to version 9.7.0.29430 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-20822

Affected Products

Foxit Reader

Phantompdf

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20822 · Security Note
• https://foxitsoftware.com/support/security-bulletins.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20822 · Vendor Advisory