CVE-2016-8334

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure

Medium · published January 6, 2017

CVSS v3.0
6.8
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.18495 · 97.2th percentile
Published
2017-01-06T21:00Z
EPSS history
Timeline
  • 22 SEP 03:13Z
    EPSS moved 19% → 1%
    epss
  • 06 SEP 03:09Z
    EPSS moved 19% → 1%
    epss
  • 30 AUG 15:36Z
    EPSS moved 1% → 19%
    epss
  • 29 AUG 04:14Z
    EPSS moved 19% → 1%
    epss
  • 06 JAN 21:00Z
    A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure
    cvelistv5