PT-2018-14932 · Foxit · Foxit Reader

Publicado 2018-11-17 · Atualizado 2018-12-18 · CVE-2018-19348

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.3.0.10826

Description The issue allows remote attackers to cause a denial of service or obtain sensitive information via a U3D sample. This is due to a problem where "Data from Faulting Address controls Branch Selection" in the U3DBrowser plugin.

Recommendations For Foxit Reader version 9.3.0.10826, consider disabling the U3D plugin to minimize the risk of exploitation until a patch is available.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-19348

Produtos afetados

Foxit Reader

Referências · 7

• ❌ https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/08/2018/11/2018-11-08/index.html · Nota, Deleted
• https://osv.dev/vulnerability/CVE-2018-19348 · Aviso do Fabricante
• ❌ https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html · Nota, Deleted
• https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10 · Nota
• https://foxitsoftware.com/support/security-bulletins.php · Aviso do Fabricante
• https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19348 · Nota de Segurança