CVE-2018-20247

High

Description

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow.

SeverityHigh
CVSS7.8
Exploit probability—
ProductFoxitsoftware Quick Pdf Library
PublishedDec 24, 2018
First seenDec 24, 2018
Weakness typeCWE-121CWE-121

How to fix

Update
  • foxitsoftware quick_pdf_library16.12 or later

Affected products

ProductAffected versionsFixed in
foxitsoftware quick_pdf_libraryv < 16.1216.12

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.