Home

CVE-2019-20819

Description

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.03

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Foxit PhantomPDF 8 (ML) 9.6.0.25114Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (EXE) 9.6.0.25114Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (EXE) 9.6.0.25114Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (MSI) 9.6.0.25114Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (MSI) 9.6.0.25114Windows
Multiple vulnerabilities affected in Foxit PhantomPDF Slim 9.6.0.25114Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-311706Foxit PhantomPDF 8 ML (8.3.12.47136)
PATCH-317726Foxit PhantomPDF 9 (EXE) (9.7.5.29616)
PATCH-317727Foxit PhantomPDF 9 (ML) (EXE) (9.7.5.29616)
PATCH-317728Foxit PhantomPDF 9 (ML) (MSI) (9.7.5.29616)
PATCH-317729Foxit PhantomPDF 9 (MSI) (9.7.5.29616)
PATCH-306313Foxit PhantomPDF (MSI) (8.3.2) (Formerly Foxit PhantomPDF Slim)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234