CVE-2015-2790 Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or...
MediumCVSS 4.3
EPSS 24.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware enterprise reader | <= 7.0.6.1126 | No fix listed |
| foxitsoftware foxit reader | <= 7.0.6.1126 | No fix listed |
| foxitsoftware phantompdf | <= 7.0.6.1126 | No fix listed |
References
- protekresearchlab.com exploit
- protekresearchlab.com exploit
- 1031878 vdb-entry
- 36334 exploit
- 36335 exploit
- www.foxitsoftware.com
- 119302 vdb-entry
- 119303 vdb-entry
- 73430 vdb-entry
- 1031877 vdb-entry