Security Advisory

CVE-2017-6883

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-14 09:02:00
Last updated 2024-08-05 15:41:17
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.