CVE-2015-2790

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

24.52%

Published

Mar 30, 2015

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBFoxit Products GIF Conversion - 'DataSubBlock' Memory Corruption Exploit-DBFoxit Products GIF Conversion - 'LZWMinimumCodeSize' Memory Corruption TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.

Weaknesses (CWE)

CWE-20

Affected Products (3)

foxitsoftware · enterprise_readervulnerable

foxitsoftware · foxit_readervulnerable

foxitsoftware · phantompdfvulnerable

References (20)

http://protekresearchlab.com/PRL-2015-02/

Exploit

http://protekresearchlab.com/prl-2015-01prl-foxit-products-gif-conversion-memory-corruption-vulnerabilities-lzwminimumcodesize/

Exploit

http://securitytracker.com/id/1031878

http://www.exploit-db.com/exploits/36334

Exploit

http://www.exploit-db.com/exploits/36335

Exploit

http://www.foxitsoftware.com/support/security_bulletins.php#FRD-23

http://www.foxitsoftware.com/support/security_bulletins.php#FRD-24

http://www.osvdb.org/119302

http://www.osvdb.org/119303

http://www.securityfocus.com/bid/73430

http://www.securitytracker.com/id/1031877

http://protekresearchlab.com/PRL-2015-02/

Exploit

http://protekresearchlab.com/prl-2015-01prl-foxit-products-gif-conversion-memory-corruption-vulnerabilities-lzwminimumcodesize/

Exploit

http://securitytracker.com/id/1031878

http://www.exploit-db.com/exploits/36334

Exploit

http://www.exploit-db.com/exploits/36335

Exploit

http://www.foxitsoftware.com/support/security_bulletins.php#FRD-23

http://www.foxitsoftware.com/support/security_bulletins.php#FRD-24

http://www.osvdb.org/119302

http://www.osvdb.org/119303

KEV Catalog EPSS Scores Vendors All CVEs