CVE-2018-17608: Use After Free
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17608?
CVE-2018-17608 is considered to have a high severity due to its potential for remote code execution and denial of service.
How do I fix CVE-2018-17608?
To fix CVE-2018-17608, update Foxit PhantomPDF and Reader to version 9.3 or later.
Which software applications are affected by CVE-2018-17608?
CVE-2018-17608 affects Foxit PhantomPDF and Foxit Reader before version 9.3.
Can CVE-2018-17608 lead to data compromise?
Yes, CVE-2018-17608 can potentially lead to unauthorized access and data compromise through remote code execution.
What types of attacks are possible with CVE-2018-17608?
CVV-2018-17608 allows attackers to execute arbitrary code or cause a denial of service through mishandled Annotation object properties.