VULNERABILITY INTELLIGENCE
CVE-2015-2790
CVSS score4.3 MEDIUM
EPSS probability24.52%
CISA KEVNot currently listed
Published2015-03-30
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P
Description
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit