Foxit PhantomPDF Multiple Vulnerabilities-June 2019 (Windows)-02

The host is installed with Foxit PhantomPDF and is prone to multiple vulnerabilities.

Multiple flaws exist due to, - An issue in handling of the setItems method of a ComboBox resulting in lack of validating the existence of an object prior to performing operations on the object. - An issue in handling of the fillColor property of a radio button resulting from lack of validating the existence of an object prior to performing operations on the object. - An issue in handling of Array.prototype.concat resulting from lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object.

Foxit PhantomPDF versions before 8.3.7.38094 and 9.x to 9.2.0.9297 on Windows.

Checks if a vulnerable version is present on the target host.

Upgrade to Foxit PhantomPDF 8.3.8 or 9.3 or later. Please see the references for more information.