Low severity · published Jan 6, 2017
CVE-2016-8334
A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure
3.3
CVSS
18.5%
EPSS
No
On KEV
Description
A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)18.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Reader · Foxitsoftware
8.0.2.805 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-8334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-8334
www.securityfocus.com
http://www.securityfocus.com/bid/93799
Technical Description
http://www.talosintelligence.com/reports/TALOS-2016-0201/
More from Reader
9.8
CVE-2019-20830
An issue was discovered in Foxit Reader and PhantomPDF before 9.6
9.8
CVE-2019-20827
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3
9.8
CVE-2020-13814
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1
9.8
CVE-2020-13805
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2
9.8
CVE-2020-13804
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2