CVE-2017-6883: Foxitsoftware Foxit Reader

Medium severity, CVSS 4.7. EPSS: 3.4% chance of exploitation in the next 30 days.

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.

Affected products

• Foxitsoftware Foxit Reader: up to and including 8.2.0.2051
• Foxitsoftware Phantompdf: up to and including 8.2.0.2192

Published 2017-03-14. Last modified 2026-06-17.