Home

CVE-2020-13809

Description

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.024

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Foxit PhantomPDF 8 (ML) 9.7.1Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (EXE) 9.7.1Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (EXE) 9.7.1Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (MSI) 9.7.1Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (MSI) 9.7.1Windows
Multiple vulnerabilities affected in Foxit PhantomPDF Slim 9.7.1Windows
Multiple Vulnerabilities are affected in Foxit PhantomPDF 8 9.7.1.29511Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-311706Foxit PhantomPDF 8 ML (8.3.12.47136)
PATCH-317726Foxit PhantomPDF 9 (EXE) (9.7.5.29616)
PATCH-317727Foxit PhantomPDF 9 (ML) (EXE) (9.7.5.29616)
PATCH-317728Foxit PhantomPDF 9 (ML) (MSI) (9.7.5.29616)
PATCH-317729Foxit PhantomPDF 9 (MSI) (9.7.5.29616)
PATCH-306313Foxit PhantomPDF (MSI) (8.3.2) (Formerly Foxit PhantomPDF Slim)
PATCH-311625Foxit PhantomPDF 8 (8.3.12.47136)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234