CVE-2015-3633
UnknownEPSS 2.69%
Last modified
CVE-2015-3633 is a vulnerability of currently unknown severity. Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital signatures.. EPSS estimates a 2.69% chance of exploitation in the next 30 days.
Description
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital signatures.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Foxitsoftware | Enterprise Reader | <= 7.1.3.320 |
| Foxitsoftware | Enterprise Reader | 7.1.0.306 |
| Foxitsoftware | Foxit Reader | <= 7.1.3.320 |
| Foxitsoftware | Foxit Reader | 7.1.0.306 |
| Foxitsoftware | Phantompdf | <= 7.1.3.320 |
| Foxitsoftware | Phantompdf | 7.1.0.306 |
References
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-26Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032228Third Party Advisory, VDB Entry
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-26Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032228Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-3633?
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital signatures.
How severe is CVE-2015-3633?
Severity scoring for CVE-2015-3633 is pending analysis. The EPSS model estimates a 2.69% probability of exploitation in the next 30 days.
How do I fix CVE-2015-3633?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-3627Libcontainer and Docker Engine before 1.6.1 opens the file-d…
- CVE-2015-3628The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM,…
- CVE-2015-3629Libcontainer 1.6.0, as used in Docker Engine, allows local u…7.8
- CVE-2015-3630Docker Engine before 1.6.1 uses weak permissions for (1) /pr…
- CVE-2015-3631Docker Engine before 1.6.1 allows local users to set arbitra…
- CVE-2015-3632Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5…
- CVE-2015-3634The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX…
- CVE-2015-3636The ping_unhash function in net/ipv4/ping.c in the Linux ker…
- CVE-2015-3637SQL injection vulnerability in phpMyBackupPro when run in mu…
- CVE-2015-3638phpMyBackupPro before 2.5 does not validate integer input, w…
- CVE-2015-3639phpMyBackupPro 2.5 and earlier does not properly sanitize in…
- CVE-2015-3640phpMyBackupPro 2.5 and earlier does not properly escape the …
Are you affected by CVE-2015-3633?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST