KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An unsafe DLL loading vulnerability can be exploited remotely to execute arbitrary code;
2. A heap buffer overflow can be exploited remotely to execute arbitrary code;
3. Multiple use-after-free vulnerabilities can be exploited remotely to execute arbitrary code;
4. An uninitialized memory/pointer vulnerability can be exploited remotely to obtain sensitive information and execute arbitrary code;
5. An out-of-bounds read/write vulnerability can be exploited remotely to obtain sensitive information and execute arbitrary code;
6. Multiple type confusion vulnerabilities can be exploited remotely to cause denial of service and execute arbitrary code;
7. An use-after-free vulnerability can be exploited remotely to obtain sensitive information and execute arbitrary code;
8. Multiple unspecified vulnerabilities can be exploited remotely to obtain sensitive information and execute arbitrary code;

Original advisories

Security bulletins

Related products

Foxit-Reader

Foxit-Phantom-PDF

CVE list

CVE-2018-3850 high

CVE-2018-3842 high

CVE-2018-3843 high

CVE-2018-10302 high

CVE-2018-10303 high

CVE-2018-3853 high

CVE-2017-17557 high

CVE-2017-14458 high

Solution

Update to the latest versionDownload Foxit PhantomPDF

Download Foxit Reader

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Foxit Reader earlier than 9.1.0.5096Foxit PhantomPDF earlier than 9.1.0.5096