An issue exists in Foxit Reader and PhantomPDF prior to 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
foxitsoftware foxit reader |
||
foxitsoftware phantompdf |
Vulmon