PT-2020-8888

CVE-2018-21244

Published

2020-06-04

Updated

2020-06-09

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6

Description The issue allows arbitrary application execution via an embedded executable file in a PDF portfolio.

Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾