Foxit Reader and Foxit PhantomPDF CVE-2017-17557 Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	103999
Class:	Boundary Condition Error
CVE:	CVE-2017-17557
Remote:	Yes
Local:	No
Published:	Apr 24 2018 12:00AM
Updated:	Apr 24 2018 12:00AM
Credit:	Steven Seeley (mr_me) of Source Incite, willJ of Tencent PC Manager working with Trend Micro's Zero Day Initiative, and Add of MeePwn working with Trend Micro's Zero Day Initiative
Vulnerable:	Foxit Reader 8.3.1 Foxit Reader 8.2.1 Foxit Reader 8.0.2 Foxit Reader 7.3.4 Foxit Reader 7.2.2 Foxit Reader 6.2.1 Foxit Reader 6.1.4 Foxit Reader 6.1.2 Foxit Reader 4.1.1 Foxit Reader 9.0.1.1049 Foxit Reader 9.0 Foxit Reader 8.3.2.25013 Foxit Reader 8.3.0.14878 Foxit Reader 8.3 Foxit Reader 8.2 Foxit Reader 8.1.4.1208 Foxit Reader 8.1.1 Foxit Reader 8.1.0.1013 Foxit Reader 8.1 Foxit Reader 8.0.5 Foxit Reader 8.0.2.805 Foxit Reader 8.0.0.624 Foxit Reader 8.0 Foxit Reader 7.3.4.311 Foxit Reader 7.3.0.118 Foxit Reader 7.3 Foxit Reader 7.2.8.1124 Foxit Reader 7.2.0.722 Foxit Reader 7.2 Foxit Reader 7.1.5.425 Foxit Reader 7.1.3.320 Foxit Reader 7.1.0.306 Foxit Reader 7.1 Foxit Reader 7.0.6.1126 Foxit Reader 6.2 Foxit Reader 6.1 Foxit Reader 4.1.1.0805 Foxit Reader 4.1 Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 9.0.1.1049 Foxit PhantomPDF 9.0 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126
Not Vulnerable:	Foxit Reader 9.1 Foxit PhantomPDF 9.1

Foxit Reader and Foxit PhantomPDF CVE-2017-17557 Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.