Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
CPE | Name | Operator | Version |
---|---|---|---|
phantompdf | le | 9.2.0.9297 | |
reader | le | 9.2.0.9297 |