CVE-2017-8454
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-05-03
- Last modified
- 2024-08-05
- Weaknesses
- CWE-125
Affected products
References
- http://www.securityfocus.com/bid/98320
- http://www.zerodayinitiative.com/advisories/ZDI-17-135/
- https://www.foxitsoftware.com/support/security-bulletins.php
