CVE-2016-6169

HIGH

Foxit Reader & PhantomPDF <7.3.4.311 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://fortiguard.com/zeroday/FG-VD-16-018

Scores

CVSS v3 7.8
EPSS 0.0038
EPSS Percentile 59.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
foxitsoftware/foxit_reader < 7.3.4.311
foxitsoftware/phantompdf < 7.3.4.311
Published Feb 07, 2018
Tracked Since Feb 18, 2026