Memory Corruption Vulnerability in Foxit Reader and PhantomPDF
CVE-2015-2790
Currently unrated
Key Information:
- Vendor
Foxit
- Vendor
- CVE Published:
- 30 March 2015
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 23%
What is CVE-2015-2790?
Certain versions of Foxit Reader, Enterprise Reader, and PhantomPDF are susceptible to a memory corruption vulnerability. This issue arises due to improper handling of Ubyte Size within a DataSubBlock structure, as well as the LZWMinimumCodeSize in GIF images. Attackers can exploit this vulnerability by crafting malicious GIF images, leading to a denial of service condition through application crashes.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.