CVE-2019-14209: Critical severity foxit phantompdf vulnerability
Published Jul 21, 2019
·Updated
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.
Affected Software
2 affected components
Foxitsoftware Phantompdf<8.3.10
Microsoft Windows
Remediation
Patch Available
Event History
Jul 21, 2019
CVE Published
via MITRE·06:17 PM
Data Sourced
via MITRE·06:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14209?
CVE-2019-14209 has been classified with a medium severity level due to the potential for heap corruption.
2
How do I fix CVE-2019-14209?
To fix CVE-2019-14209, users should upgrade to Foxit PhantomPDF version 8.3.10 or later.
3
What types of systems are affected by CVE-2019-14209?
CVE-2019-14209 affects Foxit PhantomPDF versions prior to 8.3.10 on any supported Windows operating system.
4
What is heap corruption in the context of CVE-2019-14209?
Heap corruption in CVE-2019-14209 refers to a vulnerability that may allow an attacker to inject malicious data into a heap structure, causing instability in the application.
5
Is CVE-2019-14209 targeted at specific versions of Foxit PhantomPDF?
Yes, CVE-2019-14209 specifically affects Foxit PhantomPDF versions prior to 8.3.10.