Foxit PhantomPDF CVE-2019-14210 Memory Corruption Vulnerability

Bugtraq ID:	109318
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-14210
Remote:	Yes
Local:	No
Published:	Apr 18 2019 12:00AM
Updated:	Apr 18 2019 12:00AM
Credit:	Hui Gao and Zhaoyan Xu of Palo Alto Networks
Vulnerable:	Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 8.3.9.41099 Foxit PhantomPDF 8.3.8.39677 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126
Not Vulnerable:	Foxit PhantomPDF 8.3.10

Foxit PhantomPDF CVE-2019-14210 Memory Corruption Vulnerability

Foxit PhantomPDF is prone to a memory-corruption vulnerability.

A remote attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition

Foxit PhantomPDF CVE-2019-14210 Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: http://.

Foxit PhantomPDF CVE-2019-14210 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foxit PhantomPDF CVE-2019-14210 Memory Corruption Vulnerability

References:

• PhantomPDF Homepage (foxitsoftware)
  
• Security updates available in Foxit Reader and Foxit PhantomPDF 8.0 (Foxit)