CVE-2019-6985: High severity foxit 3d pdf reader vulnerability
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in Indexing or a Heap Overflow and crash during handling of certain PDF files that embed specifically crafted 3D content, due to an array access violation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6985?
CVE-2019-6985 is a vulnerability discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF.
What is the severity of CVE-2019-6985?
The severity of CVE-2019-6985 is high with a CVSS score of 8.8.
What software version is affected by CVE-2019-6985?
Foxit 3D Plugin Beta versions up to 9.4.0.16807 for Foxit Reader and PhantomPDF are affected.
How does CVE-2019-6985 manifest itself?
CVE-2019-6985 can manifest as an Out-of-Bounds Read in Indexing or a Heap Overflow, causing the application to crash when handling certain PDF files with specifically crafted 3D content.
How can I fix CVE-2019-6985?
To fix CVE-2019-6985, users should update to Foxit 3D Plugin Beta version 9.4.0.16807 or higher for both Foxit Reader and PhantomPDF.