Foxit PhantomPDF CVE-2019-14207 Denial of Service Vulnerability

Bugtraq ID:	109314
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-14207
Remote:	Yes
Local:	No
Published:	Jul 19 2019 12:00AM
Updated:	Jul 19 2019 12:00AM
Credit:	Hui Gao of Palo Alto Networks Qi Deng, Taojie Wang, Zhaoyan Xu, Vijay Prakash, Hui Gao of Palo Alto Networks
Vulnerable:	Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 8.3.9.41099 Foxit PhantomPDF 8.3.8.39677 Foxit PhantomPDF 8.3.10.42705 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126
Not Vulnerable:	Foxit PhantomPDF 8.3.11

Foxit PhantomPDF CVE-2019-14207 Denial of Service Vulnerability

Foxit PhantomPDF is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Foxit PhantomPDF CVE-2019-14207 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: http://.

Foxit PhantomPDF CVE-2019-14207 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foxit PhantomPDF CVE-2019-14207 Denial of Service Vulnerability

References:

• PhantomPDF Homepage (foxitsoftware)
  
• Security updates available in Foxit Reader and Foxit PhantomPDF 8.0 (Foxit)