PT-2019-18396 · Foxit · Foxit 3D Plugin+2

Publicado 2019-01-28 · Atualizado 2019-01-28 · CVE-2019-6982

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Foxit 3D Plugin Beta versions prior to 9.4.0.16807 for Foxit Reader and PhantomPDF

Description The issue arises from the improper handling of a logic exception in the IFXASSERT function, leading to an Out-of-Bounds Write when the application handles certain PDF files with specifically crafted 3D content. This can cause the application to crash.

Recommendations For Foxit 3D Plugin Beta versions prior to 9.4.0.16807, update to version 9.4.0.16807 or later to resolve the issue. As a temporary workaround, consider avoiding the handling of PDF files with crafted 3D content until the update is applied.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-6982

Produtos afetados

Foxit 3D Plugin

Foxit Reader

Phantompdf

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6982 · Nota de Segurança
• https://foxitsoftware.com/support/security-bulletins.php · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6982 · Aviso do Fabricante