CVE-2018-3994

🗓️ 03 Oct 2018 15:00:00Reported by talosType

Foxit PDF Reader version 9.2.0.9297 JavaScript engine use-after-free vulnerability

Reporter	Title	Published	Views	Family All 15
CNVD	Foxit PDF Reader JavaScript Engine Remote Code Execution Vulnerability (CNVD-2018-20720)	10 Oct 201800:00	–	cnvd
Check Point Advisories	Foxit Reader and PhantomPDF Multiple Use After Free Vulnerabilities (CVE-2018-3940; CVE-2018-3941; CVE-2018-3942; CVE-2018-3943; CVE-2018-3944; CVE-2018-3945; CVE-2018-3946)	2 Oct 201800:00	–	checkpoint_advisories
Cvelist	CVE-2018-3994	3 Oct 201815:00	–	cvelist
EUVD	EUVD-2018-15780	7 Oct 202500:30	–	euvd
Tenable Nessus	Foxit PhantomPDF < 8.3.8 Multiple Vulnerabilities	30 Nov 201800:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 9.3 Multiple Vulnerabilities	12 Oct 201800:00	–	nessus
Tenable Nessus	Foxit Reader < 9.3 Multiple Vulnerabilities	12 Oct 201800:00	–	nessus
NVD	CVE-2018-3994	3 Oct 201815:29	–	nvd
OpenVAS	Foxit Reader < 9.3 Multiple Vulnerabilities - Windows	3 Oct 201800:00	–	openvas
OpenVAS	Foxit PhantomPDF < 9.3 Multiple Vulnerabilities - Windows	3 Oct 201800:00	–	openvas

NVD

Vulners

Node

foxitsoftware phantompdfRange≤9.2.0.9297

foxitsoftware readerRange≤9.2.0.9297

AND

microsoft windowsMatch-

[
  {
    "product": "Foxit PDF Reader",
    "vendor": "Foxit Software",
    "versions": [
      {
        "status": "affected",
        "version": "9.2.0.9297"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2018-0662
securitytracker	www.securitytracker.com/id/1041769
foxitsoftware	www.foxitsoftware.com/support/security-bulletins.php

21 Nov 2024 04:06Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.18.8

CVSS 38

EPSS0.00709

CWE-416