6.8
CVSSv2

CVE-2016-4065

Published: 22/04/2016 Updated: 08/11/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The ConvertToPDF plugin in Foxit Reader and PhantomPDF prior to 7.3.4 on Windows, when the gflags app is enabled, allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.

Vulnerable Product Search on Vulmon Subscribe to Product

foxitsoftware foxit reader

foxitsoftware phantompdf