CVE-2017-5556: High severity Foxitsoftware Foxit Reader vulnerability
The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Foxit Reader ConvertToPDF pluginto a version that resolves this vulnerability.Fixed in 8.2 - Upgrade
Upgrade
PhantomPDF ConvertToPDF pluginto a version that resolves this vulnerability.Fixed in 8.2 - Compensating control
On Windows, ensure the gflags app is not enabled (disable gflags) to mitigate the ConvertToPDF/PhantomPDF denial-of-service issue triggered when gflags is enabled.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5556?
CVE-2017-5556 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2017-5556?
To fix CVE-2017-5556, upgrade to Foxit Reader version 8.2 or later and PhantomPDF version 8.2 or later.
What systems are affected by CVE-2017-5556?
CVE-2017-5556 affects Foxit Reader versions prior to 8.2 and PhantomPDF versions prior to 8.2 on Windows.
What kind of attack vector is associated with CVE-2017-5556?
CVE-2017-5556 can be exploited via a crafted JPEG image to cause an out-of-bounds read.
Does CVE-2017-5556 lead to information disclosure?
Yes, CVE-2017-5556 may potentially lead to information disclosure due to the nature of the denial of service.