CVE-2017-8454: High severity foxit reader vulnerability
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8454?
CVE-2017-8454 has a medium severity rating due to its potential to allow remote attackers to obtain sensitive information.
How do I fix CVE-2017-8454?
To fix CVE-2017-8454, update Foxit Reader to version 8.2.1 or later, and update PhantomPDF to version 8.2.1 or later.
What type of vulnerability is CVE-2017-8454?
CVE-2017-8454 is an out-of-bounds read vulnerability that could lead to sensitive information disclosure.
Which software versions are affected by CVE-2017-8454?
CVE-2017-8454 affects Foxit Reader versions prior to 8.2.1 and PhantomPDF versions prior to 8.2.1.
Can CVE-2017-8454 lead to arbitrary code execution?
Yes, CVE-2017-8454 can potentially allow attackers to execute arbitrary code through a crafted PDF document.