Foxit PhantomPDF CVE-2019-14208 Denial of Service Vulnerability

Bugtraq ID:	109321
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-14208
Remote:	Yes
Local:	No
Published:	Apr 18 2019 12:00AM
Updated:	Apr 18 2019 12:00AM
Credit:	Xie Haikuo from Baidu Security Lab ADLab of Venustech Hui Gao of Palo Alto Networks
Vulnerable:	Foxit PhantomPDF 8.3.1 Foxit PhantomPDF 8.2.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 8.3.9.41099 Foxit PhantomPDF 8.3.8.39677 Foxit PhantomPDF 8.3 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126
Not Vulnerable:	Foxit PhantomPDF 8.3.10

Foxit PhantomPDF CVE-2019-14208 Denial of Service Vulnerability

Foxit PhantomPDF is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Foxit PhantomPDF CVE-2019-14208 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: http://.

Foxit PhantomPDF CVE-2019-14208 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foxit PhantomPDF CVE-2019-14208 Denial of Service Vulnerability

References:

• PhantomPDF Homepage (foxitsoftware)
  
• Security updates available in Foxit Reader and Foxit PhantomPDF 8.0 (Foxit)