Approved changes feed: RSS · Atom

cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorFoxitsoftware (432505a3-624b-5d0c-b6e3-841531927527)
ProductPhantompdf (2cd58ed5-9b41-594e-b6a8-2af682be90e0)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8879 vulnerable 2026-06-08 05:08:21.989417 Details available
The thumbnail shell extension plugin (FoxitThumbnailHndlr_x86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted JPEG2000 image embedded in a PDF document, aka an "Exploitable - Heap Corruption" issue.
Published: 2016-10-31T10:00:00.000Z
Updated: 2024-08-06T02:35:01.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8878 vulnerable 2026-06-08 05:08:21.989081 Details available
Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return value starting at FOXITREADER."
Published: 2016-10-31T10:00:00.000Z
Updated: 2024-08-06T02:35:02.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8877 vulnerable 2026-06-08 05:08:21.988727 Details available
Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted JPEG2000 image embedded in a PDF document, aka a "corrupted suffix pattern" issue.
Published: 2016-10-31T10:00:00.000Z
Updated: 2024-08-06T02:35:01.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8876 vulnerable 2026-06-08 05:08:21.988356 Details available
Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."
Published: 2016-10-31T10:00:00.000Z
Updated: 2024-08-06T02:35:02.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8875 vulnerable 2026-06-08 05:08:21.987385 Details available
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDF_x86!CreateFXPDFConvertor."
Published: 2016-10-31T10:00:00.000Z
Updated: 2024-08-06T02:35:01.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4065 vulnerable 2026-06-08 05:07:46.625195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4064 vulnerable 2026-06-08 05:07:46.624840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4063 vulnerable 2026-06-08 05:07:46.624405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4062 vulnerable 2026-06-08 05:07:46.624050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4061 vulnerable 2026-06-08 05:07:46.623720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4060 vulnerable 2026-06-08 05:07:46.623375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4059 vulnerable 2026-06-08 05:07:46.622817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.