7.5
CVSSv3

CVE-2016-8876

Published: 31/10/2016 Updated: 29/11/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF prior to 8.1 on Windows, when the gflags app is enabled, allows remote malicious users to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."

Vulnerable Product Search on Vulmon Subscribe to Product

foxitsoftware phantompdf

foxitsoftware reader