VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Oct 31, 2016· Updated Jun 17, 2026

CVE-2016-8875

CVE-2016-8875

Description

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDF_x86!CreateFXPDFConvertor."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Foxitsoftware/PhantomPDF Mac2 versions
    cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:windows:*:*range: <=8.0.5
    • (no CPE)range: <8.1
  • Foxitsoftware/Reader2 versions
    cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:windows:*:*range: <=8.0.5
    • (no CPE)range: <8.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.