PT-2017-8419
CVE-2016-3740
·
تاريخ النشر
2017-04-04
·
تاريخ التحديث
2017-04-11
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Foxit Reader versions 7.3.4.311 and earlier
Description
The issue is related to a heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf x86.dll, which allows remote attackers to execute arbitrary code via a large
SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion.Recommendations
For Foxit Reader versions 7.3.4.311 and earlier, update to version 8.0 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾