CVE-2016-8875: Medium severity foxit software phantompdf for windows vulnerability
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDFx86!CreateFXPDFConvertor."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8875?
CVE-2016-8875 has a moderate severity level due to its potential to cause denial of service.
How do I fix CVE-2016-8875?
To fix CVE-2016-8875, update Foxit Reader or PhantomPDF to version 8.1 or later.
What products are affected by CVE-2016-8875?
CVE-2016-8875 affects Foxit Reader and PhantomPDF versions prior to 8.1 on Windows.
What is the exploit method for CVE-2016-8875?
CVE-2016-8875 can be exploited by remote attackers using a crafted TIFF image.
Can CVE-2016-8875 cause data loss?
While CVE-2016-8875 primarily leads to application crashes, it does not directly cause data loss.