Out-of-Bounds Read and Heap Overflow in Foxit Reader and PhantomPDF
CVE-2019-6985
8.8HIGH
Summary
An issue in Foxit 3D Plugin Beta allows attackers to exploit certain PDF files with specially crafted 3D content, potentially leading to an Out-of-Bounds Read or a Heap Overflow. This vulnerability could cause the application to crash during the processing of such documents, resulting in application instability and the potential for further exploitation.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved