CVE-2016-8879: Medium severity foxit software phantompdf for windows vulnerability
The thumbnail shell extension plugin (FoxitThumbnailHndlrx86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted JPEG2000 image embedded in a PDF document, aka an "Exploitable - Heap Corruption" issue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8879?
The severity of CVE-2016-8879 is classified as 'Exploitable - Heap' due to the potential for denial of service caused by an out-of-bounds write leading to application crashes.
How do I fix CVE-2016-8879?
To fix CVE-2016-8879, users should upgrade to versions of Foxit Reader or PhantomPDF later than 8.1.
Which software is affected by CVE-2016-8879?
CVE-2016-8879 affects Foxit Reader and PhantomPDF versions up to and including 8.0.5 on Windows.
Can CVE-2016-8879 lead to remote attacks?
Yes, CVE-2016-8879 allows remote attackers to exploit the vulnerability through specially crafted JPEG2000 images embedded in PDF documents.
What type of attack does CVE-2016-8879 represent?
CVE-2016-8879 represents a denial of service attack due to the exploitation of a heap-based buffer overflow.