{"id":"CVE-2016-8334","state":"PUBLISHED","title":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used t","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","publishedAt":"2017-01-06T21:00:00.000Z","updatedAt":"2024-08-06T02:20:30.475Z","severity":{"score":6.8,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","source":"talos"},"assigner":"talos","products":["Foxit Software Foxit Reader"],"affected":[{"vendor":"Foxit Software","product":"Foxit Reader","versions":[{"version":"8.0.2.805","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/93799","http://www.talosintelligence.com/reports/TALOS-2016-0201/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:42:55.629Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/8xxx/CVE-2016-8334.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2016-8334","state":"PUBLISHED","datePublished":"2017-01-06T21:00:00.000Z","dateUpdated":"2024-08-06T02:20:30.475Z","assignerShortName":"talos","assignerOrgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b","dateReserved":"2016-09-28T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR."}],"affected":[{"vendor":"Foxit Software","product":"Foxit Reader","versions":[{"version":"8.0.2.805","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/93799","name":"93799","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0201/","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"out-of-bounds read","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"talos","dateUpdated":"2022-04-19T19:16:22.000Z","orgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b"},"datePublic":"2016-10-18T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"talos-cna@cisco.com","ID":"CVE-2016-8334","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Foxit Reader","version":{"version_data":[{"version_value":"8.0.2.805"}]}}]},"vendor_name":"Foxit Software"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR."}]},"impact":{"cvss":{"baseScore":6.8,"baseSeverity":"Medium","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"out-of-bounds read"}]}]},"references":{"reference_data":[{"name":"93799","refsource":"BID","url":"http://www.securityfocus.com/bid/93799"},{"name":"http://www.talosintelligence.com/reports/TALOS-2016-0201/","refsource":"MISC","url":"http://www.talosintelligence.com/reports/TALOS-2016-0201/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/93799","name":"93799","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0201/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T02:20:30.475Z"}}]}}}