CVE-2019-6759 is a critical vulnerability affecting Foxit Reader and PhantomPDF versions 9.3.10826 and earlier, allowing remote code execution due to improper validation of user-supplied data in ConvertToPDF_x86.dll. This high-severity flaw (CVSS 7.8) requires user interaction, such as opening a malicious file, to achieve code execution in the context of the current process. While there is no known public exploit code (Metasploit, Nuclei, ExploitDB) or evidence of active exploitation (KEV, Hot List), its potential for significant impact warrants attention. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 9.4.1.16828CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:* | ||
<= 8.3.9.41099CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:* | ||
>= 9.0.0, <= 9.4.1.16828CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.