CVE-2021-33793

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document…

published August 11, 2021

CVSS
—
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write in Foxit Reader and PhantomPDF could leave your documents vulnerable. Think of this as a contractor building a room that spills into your neighbor's yard—definitely not ideal! 🔥 This vulnerability mishandles the Cross-Reference table during Office document conversion, much like a librarian misfiling books, leading to chaos in the whole library! An unsuspecting user might access sensitive information that’s meant to be secured elsewhere. If exploited, this flaw could allow attackers to manipulate documents in ways that compromise your integrity—imagine sensitive data spilling over where it doesn’t belong, or worse, malicious content being injected into your documents. The potential for data corruption or unauthorized access is something no one wants to face!

Put simply

This vulnerability mishandles the Cross-Reference table during Office document conversion, much like a librarian misfiling books, leading to chaos in the whole library! An unsuspecting user might access sensitive information that’s meant to be secured elsewhere. An out-of-bounds write occurs because the Cross-Reference table is mishandled, meaning that during the conversion process, data can be written outside allocated memory, leading to unpredictable behavior or security issues.

What to do

If exploited, this flaw could allow attackers to manipulate documents in ways that compromise your integrity—imagine sensitive data spilling over where it doesn’t belong, or worse, malicious content being injected into your documents. The potential for data corruption or unauthorized access is something no one wants to face! To mitigate this, ensure you upgrade to Foxit Reader or PhantomPDF version 10.1.4 or later. Regularly check for updates and configure your software to alert you to future vulnerabilities. Staying informed is key! You’ve got this! Stay proactive about updates and your documents will be secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01087 · 65.0th percentile
Published
2021-08-11T19:34Z
EPSS history
Timeline
  • 11 AUG 19:34Z
    Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document…
    cvelistv5