CVE-2019-5005
First published: Thu Jan 03 2019(Updated: )
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Foxitsoftware Foxit Reader | <9.4 | |
| Microsoft Windows | ||
| Foxitsoftware Phantompdf | <9.4 | |
| All of | ||
| Foxitsoftware Foxit Reader | <9.4 | |
| Microsoft Windows | ||
| All of | ||
| Foxitsoftware Phantompdf | <9.4 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/foxitsoftware
- canonical/foxitsoftware foxit reader
- vendor/microsoft
- canonical/microsoft windows
- canonical/foxitsoftware phantompdf