CVE-2019-5031: High severity foxit phantompdf vulnerability
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5031?
CVE-2019-5031 is rated as a high-severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2019-5031?
To fix CVE-2019-5031, upgrade Foxit PDF Reader or PhantomPDF to version 9.4.1.16829 or later.
What versions are affected by CVE-2019-5031?
CVE-2019-5031 affects Foxit PDF Reader and PhantomPDF versions up to and including 9.4.1.16828.
What type of vulnerability is CVE-2019-5031?
CVE-2019-5031 is a memory corruption vulnerability in the JavaScript engine.
Can CVE-2019-5031 be exploited remotely?
Yes, CVE-2019-5031 can be exploited remotely by using a specially crafted PDF document.