Foxit PhantomPDF CVE-2019-14212 Denial of Service Vulnerability

Bugtraq ID:	109313
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-14212
Remote:	Yes
Local:	No
Published:	Jul 19 2019 12:00AM
Updated:	Jul 19 2019 12:00AM
Credit:	Hui Gao of Palo Alto Networks Qi Deng, Taojie Wang, Zhaoyan Xu, Vijay Prakash, Hui Gao of Palo Alto Networks
Vulnerable:	Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 8.3.9.41099 Foxit PhantomPDF 8.3.8.39677 Foxit PhantomPDF 8.3.10.42705 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.1.5.425
Not Vulnerable:	Foxit PhantomPDF 8.3.11

Foxit PhantomPDF CVE-2019-14212 Denial of Service Vulnerability

Foxit PhantomPDF is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Foxit PhantomPDF CVE-2019-14212 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foxit PhantomPDF CVE-2019-14212 Denial of Service Vulnerability

References:

• PhantomPDF Homepage (foxitsoftware)
  
• Security updates available in Foxit Reader and Foxit PhantomPDF 8.0 (Foxit)