NULL pointer dereference in Foxit PDF Reader for Windows and Foxit PDF Editor (formerly Foxit PhantomPDF) - #VU7304

Vulnerability identifier: #VU7304

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference error when processing PDF files. A remote attacker cat create a specially crafted PDF file, trick the victim into opening it and crash the application.

Foxit PDF Reader for Windows
Foxit PDF Editor (formerly Foxit PhantomPDF)

Update to version 8.3.1.

• https://www.foxitsoftware.com/support/security-bulletins.php

• Multiple vulnerabilities in Foxit Reader and PhantomPDF
• Multiple vulnerabilities in Foxit PhantomPDF