High severity7.8NVD Advisory· Published Apr 22, 2016· Updated May 6, 2026
CVE-2016-4064
CVE-2016-4064
Description
Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.
Affected products
2- cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:windows:*:*Range: <=7.3.0.118
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.zerodayinitiative.com/advisories/ZDI-16-215nvdThird Party AdvisoryVDB Entry
- www.foxitsoftware.com/support/security-bulletins.phpnvdVendor Advisory
- www.securityfocus.com/bid/85379nvd
News mentions
0No linked articles in our index yet.