Security Vulnerabilities fixed in Foxit Reader 9.4

Description

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption. A NULL pointer dereference during PDF parsing and has an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.

Affected Applications

Foxit Reader

CVE References

CVE-2019-5005 CVE-2019-5006 CVE-2019-5007

Other References

https://www.foxit.com/support/security-bulletins.html