KLA10571 Denial of service vulnerability in Foxit products

An unspecified vulnerability was found in Foxit products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed GIF in PDF file or vectors related to digital signatures.

Original advisories

Foxit bulletin

Foxit bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

Foxit-Reader

Foxit-Phantom-PDF-Suite

CVE list

CVE-2015-3632 warning

CVE-2015-3633 critical

Solution

Update to the latest version

Get Foxit products

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Foxit Reader versions earlier than 7.1.5Foxit Enterprise Reader versions earlier than 7.1.5Foxit PhantomPDF versions earlier than 7.1.5