CVE-2015-2790: foxitsoftware enterprise_reader Improper Input Validation
Vulnerability summary
CVE-2015-2790 is a medium (CVSS 4.3) Improper Input Validation vulnerability in foxitsoftware enterprise_reader. EPSS estimates a 24.52% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 30-03-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
24.52%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 24.52% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (protekresearchlab.com)
Maturity: unknown
Exploit Reference (protekresearchlab.com)
Maturity: unknown
Foxit Products GIF Conversion - 'DataSubBlock' Memory Corruption
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Foxitsoftware3 products
- enterprise_reader≤ 7.0.6.1126
- foxit_reader≤ 7.0.6.1126
- phantompdf≤ 7.0.6.1126
1 vendor · 3 products
References
11 links- www.foxitsoftware.com/support/security_bulletins.phpX Refsource CONFIRM
- www.foxitsoftware.com/support/security_bulletins.phpX Refsource CONFIRM