CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary…

published April 4, 2017

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15363 · 96.8th percentile
Published
2017-04-04T18:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 15% → 3%
    epss
  • 06 SEP 03:09Z
    EPSS moved 15% → 3%
    epss
  • 30 AUG 15:32Z
    EPSS moved 3% → 15%
    epss
  • 29 AUG 04:11Z
    EPSS moved 15% → 3%
    epss
  • 04 APR 18:00Z
    Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary…
    cvelistv5