SecuritySpace - CVE-2017-17557

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-17557

Description: In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to execute code in the context of the current process.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-17557
BugTraq ID: 103999
http://www.securityfocus.com/bid/103999
https://blog.0patch.com/2018/05/0patching-foxit-reader-buffer-oops.html
http://www.securitytracker.com/id/1040733

CVE ID:	CVE-2017-17557
Description:	In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to execute code in the context of the current process.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17557 BugTraq ID: 103999 http://www.securityfocus.com/bid/103999 https://blog.0patch.com/2018/05/0patching-foxit-reader-buffer-oops.html http://www.securitytracker.com/id/1040733