Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-11493

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.

  • Published: Sep 4, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2020-11493
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:N/A:P

CWEs:

Software From Fixed in
foxitsoftware / phantompdf - 9.7.2.29539.x
foxitsoftware / phantompdf - 10.0.0.35798.x
foxitsoftware / reader - 10.0.0.35798.x