Lucene search

CVE-2018-14289

🗓️ 31 Jul 2018 20:03:29Reported by zdiType

This vulnerability in Foxit Reader 9.0.1.5096 allows remote attackers to disclose sensitive information via PDF document parsing, leading to code execution

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2018-14289	31 Jul 201820:00	–	cvelist
Zero Day Initiative	Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	19 Jul 201800:00	–	zdi
Prion	Design/Logic Flaw	31 Jul 201820:29	–	prion
NVD	CVE-2018-14289	31 Jul 201820:29	–	nvd
Kaspersky	KLA11314 Multiple vulnerabilities in Foxit Reader	19 Jul 201800:00	–	kaspersky
OpenVAS	Foxit Reader 'JavaScript' Remote Code Execution Vulnerabilities - Windows	20 Jul 201800:00	–	openvas

Nvd

Vulners

Node

foxitsoftware foxit_readerRange≤9.1.0.5096

foxitsoftware phantompdfRange≤9.1.0.5096

AND

microsoft windowsMatch-

[
  {
    "product": "Foxit Reader",
    "vendor": "Foxit",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.1.5096"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-18-749
foxitsoftware	www.foxitsoftware.com/support/security-bulletins.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Jul 2018 20:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS24.3

CVSS36.5

EPSS0.01458

CWE-125