CVE-2016-4063

Description

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.

References

https://www.foxitsoftware.com/support/security-bulletins.php

http://www.zerodayinitiative.com/advisories/ZDI-16-220

http://www.zerodayinitiative.com/advisories/ZDI-16-219

http://www.securityfocus.com/bid/85379

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3