Lucene search
PRIOn knowledge basePRION:CVE-2018-3961HistoryOct 02, 2018 - 9:29 p.m.
Design/Logic Flaw
2018-10-0221:29:00
PRIOn knowledge base
www.prio-n.com
1
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phantompdf | le | 9.2.0.9297 | |
| reader | le | 9.2.0.9297 |
Related
nvd
nvd
CVE-2018-3961
2018-10-02 21:29:01
cve
cve
CVE-2018-3961
2018-10-02 21:29:01
cvelist
cvelist
CVE-2018-3961
2018-10-01 00:00:00
talos
talos
kaspersky
kaspersky
KLA11326 Multiple vulnerabilities in Foxit Reader
2018-09-28 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
2018-10-01 09:59:00
checkpoint_advisories
checkpoint_advisories
nessus
nessus
Foxit Reader < 9.3 Multiple Vulnerabilities
2018-10-12 00:00:00
Foxit PhantomPDF < 8.3.8 Multiple Vulnerabilities
2018-11-30 00:00:00
Foxit PhantomPDF < 9.3 Multiple Vulnerabilities
2018-10-12 00:00:00