CVE-2019-14212 in PhantomPDF

Tóm tắt

Bởi MITRE

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 21/07/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-138399
• CPE: sẵn sàng
• CWE: CWE-476 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.02233
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-14212
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-14212
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-14212/