CVE-2020-26539
02.10.2020, 08:15
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).Enginsight
| Vendor | Product | Version |
|---|---|---|
| foxitsoftware | foxit_reader | 𝑥 < 10.1 |
| foxitsoftware | phantompdf | 𝑥 < 10.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration