CVE-2017-5364: Buffer Overflow

Published Jan 13, 2017

Updated

Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerability has been fixed in v2.0.

Affected Software

1 affected component

Foxitsoftware Foxit Pdf Toolkit=1.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Foxit PDF Toolkit to a version that resolves this vulnerability.
Fixed in 2.0

Event History

Jan 13, 2017

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

Description

Data Sourced

via NVD·09:59 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-5364?

CVE-2017-5364 has a high severity rating due to its potential to cause Denial of Service and Remote Code Execution.

How do I fix CVE-2017-5364?

To mitigate CVE-2017-5364, upgrade to Foxit PDF Toolkit version 2.0 or later.

What type of attack does CVE-2017-5364 enable?

CVE-2017-5364 allows attackers to execute arbitrary code or crash the application via a specially crafted PDF file.

Is CVE-2017-5364 still a risk if I am using a later version of Foxit PDF Toolkit?

No, using a version later than 1.3, specifically version 2.0 or above, mitigates the risk associated with CVE-2017-5364.

What software is affected by CVE-2017-5364?

CVE-2017-5364 specifically affects Foxit PDF Toolkit version 1.3.