CVE-2016-4064

Description

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.

References

https://www.foxitsoftware.com/support/security-bulletins.php

http://www.zerodayinitiative.com/advisories/ZDI-16-215

http://www.securityfocus.com/bid/85379

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3