CVE-2018-17609: Use After Free
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17609?
CVE-2018-17609 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2018-17609?
To fix CVE-2018-17609, you should update Foxit PhantomPDF and Reader to the latest version, specifically version 9.3 or later.
What types of software are affected by CVE-2018-17609?
CVE-2018-17609 affects Foxit PhantomPDF and Foxit Reader versions prior to 9.3.
What types of attacks can be executed using CVE-2018-17609?
CVE-2018-17609 allows remote attackers to either execute arbitrary code or cause a denial of service through mishandled Annotation object properties.
Is there a known workaround for CVE-2018-17609?
There are no official workarounds for CVE-2018-17609; applying the necessary updates is the recommended action.