Foxit Update
3262Warning Date
Severity Level
Warning Number
Target Sector
17 October, 2019
● High
2019-530
All
Description:
Foxit has released security update to address multiple vulnerabilities in the following products:
- Foxit Reader Version 9.6.0.25114 and earlier for Windows
- Foxit PhantomPDF Version 9.6.0.25114 and earlier for Windows
- Foxit PhantomPDF Version 3.3.0.0709 and earlier for macOS
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Crash the application.
- Denial of service attack (DoS).
- Remote arbitrary code execution.
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Foxit advisory: https://www.foxitsoftware.com/support/security-bulletins.php