CVE-2016-4059

CVE-2016-4059

EPSS 4.4%

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.foxitsoftware.com/support/security-bulletins.php http://www.securityfocus.com/bid/85379 http://www.zerodayinitiative.com/advisories/ZDI-16-221