CVE-2016-4059 - Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document

Back Back to CVE browser

HIGH

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document

Published Apr 22, 2016

7.8

HIGH

CVSS 3.0

EPSS 4.41%

Description

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://www.securityfocus.com/bid/85379
vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-16-221
x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-5060
Advisory
https://www.foxitsoftware.com/support/security-bulletins.php
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/85379		vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-16-221		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-5060		Advisory
https://www.foxitsoftware.com/support/security-bulletins.php		x_refsource_CONFIRMVendor Advisory