Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2017-10994

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.

  • Published: Jul 7, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-10994
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.3
  • AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
foxitsoftware / foxit_reader - 8.3.0.14878.x
foxitsoftware / phantompdf - 8.3.0.14878.x