CVE-2017-8453: High severity foxit reader vulnerability
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8453?
CVE-2017-8453 has a medium severity level due to its potential for sensitive information disclosure and arbitrary code execution.
How do I fix CVE-2017-8453?
To fix CVE-2017-8453, users should update Foxit Reader and PhantomPDF to version 8.2.1 or later.
What versions of Foxit Reader are affected by CVE-2017-8453?
Foxit Reader versions prior to 8.2.1, specifically up to 8.2.0.2051, are affected by CVE-2017-8453.
What versions of Foxit PhantomPDF are affected by CVE-2017-8453?
Foxit PhantomPDF versions prior to 8.2.1, specifically up to 8.2.0.2192, are affected by CVE-2017-8453.
What type of attack does CVE-2017-8453 facilitate?
CVE-2017-8453 facilitates remote attacks that can lead to sensitive information disclosure or potential execution of arbitrary code.