CVEs-PoC/2018/CVE-2018-20249.md

CVE-2018-20249

Description

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

POC

Reference

• https://www.foxitsoftware.com/support/security-bulletins.php

Github

• https://github.com/0xCyberY/CVE-T4PDF
• https://github.com/ARPSyndicate/cvemon