CVE-2016-8878

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute…

published October 31, 2016

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return value starting at FOXITREADER."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02590 · 85.1th percentile
Published
2016-10-31T10:00Z
EPSS history
Timeline
  • 31 OCT 10:00Z
    Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute…
    cvelistv5