Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
BID:98317
Info
Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
| Bugtraq ID: | 98317 |
| Class: | Design Error |
| CVE: |
CVE-2017-8453 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 05 2017 12:00AM |
| Updated: | May 18 2017 04:19PM |
| Credit: | Ashfaq Ansari - Project Srishti |
| Vulnerable: |
Foxit Reader 8.0.2 Foxit Reader 7.3.4 Foxit Reader 7.2.2 Foxit Reader 6.2.1 Foxit Reader 6.1.4 Foxit Reader 6.1.2 Foxit Reader 4.1.1 Foxit Reader 2.2.1025 Foxit Reader 8.2 Foxit Reader 8.1.4.1208 Foxit Reader 8.1.1 Foxit Reader 8.1.0.1013 Foxit Reader 8.1 Foxit Reader 8.0.5 Foxit Reader 8.0.2.805 Foxit Reader 8.0.0.624 Foxit Reader 8.0 Foxit Reader 7.3.4.311 Foxit Reader 7.3.0.118 Foxit Reader 7.3 Foxit Reader 7.2.8.1124 Foxit Reader 7.2.0.722 Foxit Reader 7.2 Foxit Reader 7.1.5.425 Foxit Reader 7.1.3.320 Foxit Reader 7.1.0.306 Foxit Reader 7.1 Foxit Reader 7.0.6.1126 Foxit Reader 6.2 Foxit Reader 6.1 Foxit Reader 4.1.1.0805 Foxit Reader 4.1 Foxit Reader 2.3 Foxit Reader 2.1 Foxit Reader 2.0.0.0625 Foxit Reader 2.0 Foxit Reader 1.1.1.0602 Foxit Reader 1.1 Foxit PhantomPDF 8.0.2 Foxit PhantomPDF 7.3.4 Foxit PhantomPDF 7.2.2 Foxit PhantomPDF 7.1.5 Foxit PhantomPDF 8.2 Foxit PhantomPDF 8.1.1.1115 Foxit PhantomPDF 8.1.1 Foxit PhantomPDF 8.1.0.1013 Foxit PhantomPDF 8.1 Foxit PhantomPDF 8.0.5 Foxit PhantomPDF 8.0.2.805 Foxit PhantomPDF 8.0.1.628 Foxit PhantomPDF 8.0 Foxit PhantomPDF 7.3.4.311 Foxit PhantomPDF 7.3.0.118 Foxit PhantomPDF 7.3 Foxit PhantomPDF 7.2.2.929 Foxit PhantomPDF 7.2.0.722 Foxit PhantomPDF 7.2 Foxit PhantomPDF 7.1.5.425 Foxit PhantomPDF 7.1.3.320 Foxit PhantomPDF 7.1.2.311 Foxit PhantomPDF 7.1.0.306 Foxit PhantomPDF 7.1 Foxit PhantomPDF 7.0.6.1126 |
| Not Vulnerable: |
Foxit Reader 8.2.1 Foxit PhantomPDF 8.2.1 |
Discussion
Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit Reader and PhantomPDF are prone to a information disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information. Failed exploit attempts will result in a denial-of-service condition.
Foxit Reader and PhantomPDF are prone to a information disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Foxit Reader and PhantomPDF CVE-2017-8453 Out-Of-Bounds Read Information Disclosure Vulnerability
References:
References:
- Foxit Homepage (Foxit Software)
- Foxit Security Bulletins (foxitsoftware)
- ZDI-17-134: Foxit Reader Font Parsing Out-Of-Bounds Read Information Disclosure (Zero Day Initiative)