| Package | Affected versions | Patched versions |
|---|---|---|
| phantompdf | ≤ 10.0.0.35798≤ 9.7.2.29539 | |
| reader | ≤ 10.0.0.35798 |
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free