Every CVE Search/ Get API key

CVE-2015-3632

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a...

4.3 MediumPublic exploit

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.

Exploit likelihood

6.03%Up 2.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.

Record
CVE-2015-3632
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.

Record
CVE-2015-3632
Updated
2026-11-02
EUVDEUVD-2015-3670 No score

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.

Record
EUVD-2015-3670
Updated
2026-11-03
GitHub AdvisoriesGHSA-gr2m-6qq8-c2w2 No score

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a...

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.

Record
GHSA-gr2m-6qq8-c2w2
Weakness
CWE-119
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBFoxit Reader PDF 7.1.3.320 - Parsing Memory Corruption2015-04-29

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3632 is a medium vulnerability (CVSS 4.3) in Foxitsoftware Enterprise Reader, published May 1, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.03%, the 93rd percentile. No source names a fixed version.

References

MoveEnter Open