CVE-2017-5556

Опубликовано: 23 янв. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 5.8

EPSS Низкий

Описание

The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.

Ссылки

http://www.securityfocus.com/bid/95353
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-039/
Third Party Advisory
VDB Entry
https://www.foxitsoftware.com/support/security-bulletins.php
Vendor Advisory
http://www.securityfocus.com/bid/95353
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-039/
Third Party Advisory
VDB Entry
https://www.foxitsoftware.com/support/security-bulletins.php
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:foxitsoftware:foxit_reader:8.1.4.1208:*:*:*:*:*:*:*

cpe:2.3:a:foxitsoftware:phantompdf:8.1.1.1115:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0059

Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

GHSA-vj5c-95p9-jf9j