PT-2021-22212
CVE-2021-38563
·
تاريخ النشر
2021-08-11
·
تاريخ التحديث
2022-02-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Foxit PDF Reader versions prior to 11.0.1
Foxit PDF Editor versions prior to 11.0.1
Description
The issue arises from incorrect handling of array sizes derived from a /Size entry, leading to situations where the array size is smaller than the maximum indirect object number. This results in attempted incorrect array access, which can cause a NULL pointer dereference, or out-of-bounds read or write.
Recommendations
For Foxit PDF Reader versions prior to 11.0.1, update to version 11.0.1 or later.
For Foxit PDF Editor versions prior to 11.0.1, update to version 11.0.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾