The vulnerability exists due to improper input validation within the Simphony Server (Apache log4net) component in Oracle Hospitality Simphony. The vulnerability allows a remote non-authenticated attacker to execute arbitrary code. Is there known malware, which exploits this vulnerability?ĬWE-ID: CWE-20 - Improper Input Validation How the attacker can exploit this vulnerability?

cpe:2.3:a:foxit_software:foxit_phantompdf:11.:*:*:*:*:*:*:*Ĭan this vulnerability be exploited remotely?.Vulnerable software versionsįoxit PDF Editor (formerly Foxit PhantomPDF): 11. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system. A remote attacker can trick the victim to open a specially crafted PDF file, trigger a heap-based buffer overflow and execute arbitrary code on the target system. The vulnerability exists due to a boundary error. The vulnerability allows a remote attacker to execute arbitrary code on the target system. CWE-ID: CWE-122 - Heap-based Buffer Overflow

Foxit reader pdf encryption