CVE-2016-8878

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

PT-2016-7606

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 8.1 PhantomPDF versions prior to 8.1 Description The issue allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document. This occurs when the gflags app i...

PT-2016-5834

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 7.3.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted image, including JPEG, GIF, or BMP formats. This occurs when...