CVE-2018-17781 describes an Uninitialized Object Information Disclosure vulnerability affecting Foxit PhantomPDF and Reader versions prior to 9.3, impacting both Windows and Microsoft versions of these products. This high-severity vulnerability (CVSS 7.5) can be exploited remotely with low attack complexity, potentially leading to significant confidentiality impacts without requiring user interaction. While there are no known public exploits or Metasploit modules, the vulnerability has received some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 9.2.0.9297CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:* | ||
<= 9.2.0.9297CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.