CVE-2016-8334 in PDF Reader

Summary

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Talos
• Reservation: 09/28/2016
• Disclosure: 01/06/2017
• Moderation: VulDB entry created
• Entries: VDB-95088 (1)
• CPE: ready
• CWE: CWE-125 (Confirmed)
• CVSS: 5.5
• EPSS: 0.13461
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8334
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8334
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8334/