CVE-2016-8876

2016-10-3110:00:00

mitre

www.cve.org

AI Score

8.3

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka “Read Access Violation starting at FoxitReader.”