CVE-2018-17781 Information disclosure in n/a

What is CVE-2018-17781?

CVE-2018-17781 is a high-severity vulnerability in Foxitsoftware Phantompdf, published on 29 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.

Weakness: CWE-200

Which versions are affected by CVE-2018-17781?

It affects 2 products.

Products include Foxitsoftware Phantompdf, Foxitsoftware Reader.

How do I fix CVE-2018-17781?

No fix has been published for CVE-2018-17781 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-17781 being exploited?

There is no known exploitation of CVE-2018-17781 in the wild and no public exploit code.

Other vulnerabilities in Foxitsoftware Phantompdf

• CVE-2018-21242 An issue was discovered in Foxit PhantomPDF before 8.3.6. Critical 9.8
• CVE-2018-21244 File upload in n/a Critical 9.8
• CVE-2019-20825 Memory corruption in n/a Critical 9.8
• CVE-2019-20827 Denial of service in n/a Critical 9.8
• CVE-2019-20830 Memory corruption in n/a Critical 9.8

All Foxitsoftware Phantompdf vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6xrr-hxxj-4x7m.