PT-2020-20321 · Foxit · Foxit Phantompdf

Mat Powell · Published 2020-02-11 · Updated 2020-02-18 · CVE-2020-8845

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.6.0.25114

Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the handling of watermarks in AcroForms due to the lack of validating the existence of an object prior to performing operations on it. An attacker can leverage this to execute code in the context of the current process.

Recommendations For Foxit PhantomPDF version 9.6.0.25114, update to a version that fixes the issue with handling watermarks in AcroForms, specifically addressing the lack of object existence validation prior to performing operations. As a temporary workaround, consider disabling the handling of watermarks in AcroForms until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-8845

ZDI-20-201

Affected Products

Foxit Phantompdf

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8845 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-201 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8845 · Vendor Advisory
• https://foxitsoftware.com/support/security-bulletins.php · Vendor Advisory
• https://t.me/cvenotify/1044 · Telegram Post