CVE-2016-3740

Description

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0.

References

https://www.foxitsoftware.com/support/security-bulletins.php

https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3