KLA10938 Information disclosure and bypass security restrictions vulnerability in Foxit Reader

A large out-of-bounds read vulnerability was found in Foxit PDF Reader 8.0.2.805. By exploiting this vulnerability malicious users can possibly obtain sensitive information. In combination with another vulnerability, this one can be used to leak heap memory and in bypassing ASLR. This vulnerability can be exploited remotely via a specially designed JBIG2 file.

Original advisories

TALOS-2016-0201

Related products

Foxit-Reader

CVE list

CVE-2016-8334 warning

Solution

Update to the latest version

Download Foxit Reader

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Foxit PDF Reader 8.0.2.805