Lucene search
PRIOn knowledge basePRION:CVE-2018-3850HistoryApr 23, 2018 - 3:29 p.m.
Design/Logic Flaw
2018-04-2315:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pdf_reader | eq | 9.0.1.1049 |
Related
checkpoint_advisories
checkpoint_advisories
Foxit Reader JavaScript XFA Use After Free (CVE-2018-3850)
2018-10-07 00:00:00
cvelist
cvelist
CVE-2018-3850
2018-04-19 00:00:00
nvd
nvd
CVE-2018-3850
2018-04-23 15:29:00
talos
talos
Foxit PDF Reader JavaScript XFA Clone Remote Code Execution Vulnerability
2018-04-19 00:00:00
cve
cve
CVE-2018-3850
2018-04-23 15:29:00
seebug
seebug
talosblog
talosblog
Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
2018-04-19 10:05:00
nessus
nessus
Foxit Reader < 9.1 Multiple Vulnerabilities
2018-04-27 00:00:00
Foxit PhantomPDF < 9.1 Multiple Vulnerabilities
2018-04-27 00:00:00
Foxit PhantomPDF < 8.3.6 Multiple Vulnerabilities
2018-12-21 00:00:00
openvas
openvas
Foxit PhantomPDF Multiple Vulnerabilities (Apr 2018) - Windows
2018-04-25 00:00:00
Foxit PhantomPDF Multiple Vulnerabilities (May 2018) - Windows
2018-05-18 00:00:00
Foxit Reader Multiple Vulnerabilities (Apr 2018) - Windows
2018-04-25 00:00:00
kaspersky
kaspersky
KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF
2018-04-19 00:00:00