CVE-2011-0332: Foxitsoftware Foxit Phantom

High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days.

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.

Affected products

• Foxitsoftware Foxit Phantom: up to and including 2.3; version 1.0.2 only; version 2.0 only; version 2.1 only; version 2.1.1 only; version 2.2 only; …
• Foxitsoftware Foxit Reader: up to and including 4.3; version 2.0 only; version 2.2 only; version 2.3 only; version 3.0 only; version 3.1 only; …

Published 2011-02-25. Last modified 2026-06-16.