An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Foxit_reader | — | Update Foxit Reader to the latest version | Oct 6, 2020 | Oct 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub