Lucene search

K
cve[email protected]CVE-2015-2790
HistoryMar 30, 2015 - 2:59 p.m.

CVE-2015-2790

2015-03-3014:59:10
CWE-20
web.nvd.nist.gov
25
cve-2015-2790
foxit reader
enterprise reader
phantompdf
denial of service
memory corruption
crash
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.

Affected configurations

NVD
Node
foxitsoftwareenterprise_readerRange7.0.6.1126
OR
foxitsoftwarefoxit_readerRange7.0.6.1126
OR
foxitsoftwarephantompdfRange7.0.6.1126

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

Related for CVE-2015-2790