CVE Vulnerabilities

CVE-2015-8580

Published: Dec 16, 2015 | Modified: Nov 08, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document.

Affected Software

Name Vendor Start Version End Version
Foxit_reader Foxitsoftware * 7.2.0.722 (including)
Phantompdf Foxitsoftware * 7.2.0.722 (including)

References