Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
CPE | Name | Operator | Version |
---|---|---|---|
pdf_editor | ge | 11.0 | |
pdf_editor | lt | 11.1 | |
pdf_reader | ge | 11.0 | |
pdf_reader | lt | 11.1 | |
phantompdf | lt | 10.1.6 |