CVE-2017-14694: Buffer Overflow

Published Sep 22, 2017

Updated

Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.".

Affected Software

1 affected component

Foxitsoftware Foxit Reader=8.3.2.25013

Event History

Sep 22, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-14694?

CVE-2017-14694 is classified as a high severity vulnerability that allows arbitrary code execution or denial of service.

How do I fix CVE-2017-14694?

To fix CVE-2017-14694, update Foxit Reader or Foxit PhantomPDF to the latest version that is beyond 8.3.2.25013.

What products are affected by CVE-2017-14694?

CVE-2017-14694 affects Foxit Reader version 8.3.2.25013 and earlier as well as Foxit PhantomPDF version 8.3.2.25013 and earlier.

What are the potential impacts of CVE-2017-14694?

The potential impacts of CVE-2017-14694 include arbitrary code execution which can lead to a full system compromise and denial of service.

Is CVE-2017-14694 a local or remote vulnerability?

CVE-2017-14694 can potentially be exploited remotely through crafted PDF files opened by the vulnerable software.