Foxit Reader/PhantomPDF post-release Reuse Vulnerability (CVE-2016-4059)

Foxit Reader/PhantomPDF post-release Reuse Vulnerability (CVE-2016-4059)
Foxit Reader/PhantomPDF post-release Reuse Vulnerability (CVE-2016-4059)

Release date:
Updated on:

Affected Systems:

Foxit Reader
Foxit Phantom PDF <7.3.4

Description:

CVE (CAN) ID: CVE-2016-4059

Foxit Reader is a small PDF document viewer and print program.

Foxit Reader/PhantomPDF versions earlier than 7.3.4 have the vulnerability of reuse after being released. The FlateDecode stream constructed in the PDF file allows remote attackers to execute arbitrary code.

<* Source: Jaanus Kp
Clarified Security
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.foxitsoftware.com/support/security-bulletins.php

Install the PDF Reader Foxit Reader in Ubuntu

This article permanently updates the link address: