CVE-2018-17706

Summary: CVE-2018-17706 affects Foxit PhantomPDF/Phantom PDF 9.1.5096 and related versions. The issue is an out-of-bounds memory access in fxhtml2pdf caused by insufficient validation of user-supplied data during HTML conversion, enabling remote code execution. Exploitation requires user interact...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...