CVE-2019-14208

Vulnerability

Foxit PhantomPDF versions prior to 8.3.10 contain a NULL pointer dereference vulnerability. The crash occurs when the application retrieves a PDF object from a document or parses a portfolio that includes a null dictionary. This is triggered by malformed PDF content that lacks a valid dictionary entry, leading to a null pointer access [1].

Exploitation

An attacker can exploit this issue by convincing a user to open a specially crafted PDF document or portfolio using Foxit PhantomPDF. No special network position or authentication is required beyond sending the file to the victim and waiting for them to open it in the vulnerable software [1].

Impact

Successful exploitation causes a denial of service through application crash due to the NULL pointer dereference. The vulnerability does not lead to arbitrary code execution or data disclosure based on available information [1].

Mitigation

The vulnerability is fixed in Foxit PhantomPDF version 8.3.10. Users should update to this version or later to prevent the crash. No workaround has been disclosed, and the software is not listed on the KEV [1].