| Package | Affected versions | Patched versions |
|---|---|---|
| foxit phantom | = 1.0.2= 2.0= 2.1= 2.1.1= 2.2= 2.2.1= 2.2.3= 2.2.4≤ 2.3 | |
| foxit reader | = 2.0= 2.2= 2.3= 3.0= 3.1= 3.1.1= 3.1.3= 3.1.4= 3.2= 3.2.1= 3.3.1= 4.0= 4.1.1≤ 4.3 |
Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free