CVE-2019-20830

An issue was discovered in Foxit Reader and PhantomPDF before 9.6

published June 4, 2020

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write lurks in Foxit Reader and PhantomPDF when paired with Internet Explorer — a sneaky flaw that could lead to unexpected behavior! Think of it like a delivery driver mistakenly dropping off packages in the wrong house because they didn't check the address properly. When the request is misrouted, it can lead to chaos in the wrong mailbox! This bug could potentially lead to instability in the application, allowing for erratic behavior or crashes. While there are no confirmed exploits yet, the risk of unintentional data manipulation is still a concern, so it’s better to be safe than sorry!

Put simply

Think of it like a delivery driver mistakenly dropping off packages in the wrong house because they didn't check the address properly. When the request is misrouted, it can lead to chaos in the wrong mailbox! The vulnerability arises from an out-of-bounds write when Foxit Reader and PhantomPDF interact with Internet Explorer, meaning data can be written outside of allocated memory spaces, which can cause unpredictable results.

What to do

This bug could potentially lead to instability in the application, allowing for erratic behavior or crashes. While there are no confirmed exploits yet, the risk of unintentional data manipulation is still a concern, so it’s better to be safe than sorry! To mitigate this issue, upgrade to version 9.6 or later of Foxit Reader and PhantomPDF. It's also wise to review your application's dependencies to ensure all components are up to date and functioning properly. You've got this! With these updates, you'll be protecting your systems in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01761 · 77.8th percentile
Published
2020-06-04T16:52Z
EPSS history
Timeline
  • 04 JUN 16:52Z
    An issue was discovered in Foxit Reader and PhantomPDF before 9.6
    cvelistv5