Foxit Reader and Foxit PhantomPDF CVE-2017-10994 Arbitrary Write Remote Code Execution Vulnerability

BID:99499

Info

Foxit Reader and Foxit PhantomPDF CVE-2017-10994 Arbitrary Write Remote Code Execution Vulnerability

Bugtraq ID: 99499
Class: Design Error
CVE: CVE-2017-10994
Remote: Yes
Local: No
Published: Jul 04 2017 12:00AM
Updated: Jul 04 2017 12:00AM
Credit: Ashfaq Ansari - Project Srishti
Vulnerable: Foxit Reader 8.2.1
Foxit Reader 8.0.2
Foxit Reader 7.3.4
Foxit Reader 7.2.2
Foxit Reader 6.2.1
Foxit Reader 6.1.4
Foxit Reader 6.1.2
Foxit Reader 4.1.1
Foxit Reader 2.2.1025
Foxit Reader 8.3
Foxit Reader 8.2
Foxit Reader 8.1.4.1208
Foxit Reader 8.1.1
Foxit Reader 8.1.0.1013
Foxit Reader 8.1
Foxit Reader 8.0.5
Foxit Reader 8.0.2.805
Foxit Reader 8.0.0.624
Foxit Reader 8.0
Foxit Reader 7.3.4.311
Foxit Reader 7.3.0.118
Foxit Reader 7.3
Foxit Reader 7.2.8.1124
Foxit Reader 7.2.0.722
Foxit Reader 7.2
Foxit Reader 7.1.5.425
Foxit Reader 7.1.3.320
Foxit Reader 7.1.0.306
Foxit Reader 7.1
Foxit Reader 7.0.6.1126
Foxit Reader 6.2
Foxit Reader 6.1
Foxit Reader 4.1.1.0805
Foxit Reader 4.1
Foxit Reader 2.3
Foxit Reader 2.1
Foxit Reader 2.0.0.0625
Foxit Reader 2.0
Foxit Reader 1.1.1.0602
Foxit Reader 1.1
Foxit PhantomPDF 8.2.1
Foxit PhantomPDF 8.0.2
Foxit PhantomPDF 7.3.4
Foxit PhantomPDF 7.2.2
Foxit PhantomPDF 7.1.5
Foxit PhantomPDF 8.3
Foxit PhantomPDF 8.2
Foxit PhantomPDF 8.1.1.1115
Foxit PhantomPDF 8.1.1
Foxit PhantomPDF 8.1.0.1013
Foxit PhantomPDF 8.1
Foxit PhantomPDF 8.0.5
Foxit PhantomPDF 8.0.2.805
Foxit PhantomPDF 8.0.1.628
Foxit PhantomPDF 8.0
Foxit PhantomPDF 7.3.4.311
Foxit PhantomPDF 7.3.0.118
Foxit PhantomPDF 7.3
Foxit PhantomPDF 7.2.2.929
Foxit PhantomPDF 7.2.0.722
Foxit PhantomPDF 7.2
Foxit PhantomPDF 7.1.5.425
Foxit PhantomPDF 7.1.3.320
Foxit PhantomPDF 7.1.2.311
Foxit PhantomPDF 7.1.0.306
Foxit PhantomPDF 7.1
Foxit PhantomPDF 7.0.6.1126
Not Vulnerable: Foxit Reader 8.3.1
Foxit PhantomPDF 8.3.1

Exploit / POC

Foxit Reader and Foxit PhantomPDF CVE-2017-10994 Arbitrary Write Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: http://.

Solution / Fix

Foxit Reader and Foxit PhantomPDF CVE-2017-10994 Arbitrary Write Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report