Vulnerability Details CVE-2014-4646
Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.043
EPSS Ranking 88.4%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/59494
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-20
- http://www.zerodayinitiative.com/advisories/ZDI-14-214
- http://secunia.com/advisories/59494
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-20
- http://www.zerodayinitiative.com/advisories/ZDI-14-214
Products affected by CVE-2014-4646
-
cpe:2.3:a:foxitsoftware:foxit_pdf_sdk_dll:3.1.1.2927