Foxit Reader and PhantomPDF Multiple Security Vulnerabilities

Bugtraq ID:	104300
Class:	Boundary Condition Error
CVE:	CVE-2018-5674 CVE-2018-5675 CVE-2018-5676 CVE-2018-5677 CVE-2018-5678 CVE-2018-5679 CVE-2018-5680 CVE-2018-7406 CVE-2018-7407
Remote:	Yes
Local:	No
Published:	May 24 2018 12:00AM
Updated:	May 24 2018 12:00AM
Credit:	Anonymous, kdot, and Dmitri Kaslov working with Trend Micro's Zero Day Initiative and Steven Seeley (mr_me) of Source Incite.
Vulnerable:	Foxit Reader 8.3.1 Foxit Reader 8.2.1 Foxit Reader 8.0.2 Foxit Reader 7.3.4 Foxit Reader 7.2.2 Foxit Reader 6.2.1 Foxit Reader 6.1.4 Foxit Reader 6.1.2 Foxit Reader 4.1.1 Foxit Reader 3.1.1 Build 0928 Foxit Reader 2.2.1025 Foxit Reader 9.0.1.1049 Foxit Reader 9.0 Foxit Reader 8.3.2.25013 Foxit Reader 8.3.0.14878 Foxit Reader 8.3 Foxit Reader 8.2 Foxit Reader 8.1.4.1208 Foxit Reader 8.1.1 Foxit Reader 8.1.0.1013 Foxit Reader 8.1 Foxit Reader 8.0.5 Foxit Reader 8.0.2.805 Foxit Reader 8.0.0.624 Foxit Reader 8.0 Foxit Reader 7.3.4.311 Foxit Reader 7.3.0.118 Foxit Reader 7.3 Foxit Reader 7.2.8.1124 Foxit Reader 7.2.0.722 Foxit Reader 7.2 Foxit Reader 7.1.5.425 Foxit Reader 7.1.3.320 Foxit Reader 7.1.0.306 Foxit Reader 7.1 Foxit Reader 7.0.6.1126 Foxit Reader 6.2 Foxit Reader 6.1 Foxit Reader 4.1.1.0805 Foxit Reader 4.1 Foxit Reader 2.3 Foxit Reader 2.1 Foxit Reader 2.0.0.0625 Foxit Reader 2.0 Foxit Reader 1.1.1.0602 Foxit Reader 1.1 Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 9.0.1.1049 Foxit PhantomPDF 9.0 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126
Not Vulnerable:	Foxit Reader 9.1 Foxit PhantomPDF 9.1

Foxit Reader and PhantomPDF Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foxit Reader and PhantomPDF Multiple Security Vulnerabilities

References:

• Foxit Phantom Homepage (Foxit)
  
• Foxit Reader Homepage (Foxit )
  
• Security bulletins (foxitsoftware)