CVE-2016-3740
Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-04-04
- Last modified
- 2024-08-06
- Weaknesses
- CWE-119
Affected products
References
- https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html
- https://www.foxitsoftware.com/support/security-bulletins.php
