CVE-2016-8334
CVE-2016-8334
Vexday Risk Score
18Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.8EPSS 18.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Jan 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H
Affected products
Foxit Software · Foxit ReaderWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →