The Register: Foxit PDF Reader is well and truly foxed up, but vendor won’t patch

The Register: Foxit PDF Reader is well and truly foxed up, but vendor won’t patch. “The Zero Day Initiative (ZDI) has gone public with a Foxit PDF Reader vulnerability without a fix, because the vendor resisted patching. The ZDI made the decision last week that the two vulns, CVE-2017-10951 and CVE-2017-10952, warranted release so at least some of Foxit’s 400 million users could protect themselves.”