Lucene search
PRIOn knowledge basePRION:CVE-2018-3962HistoryOct 02, 2018 - 9:29 p.m.
Design/Logic Flaw
2018-10-0221:29:00
PRIOn knowledge base
www.prio-n.com
3
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phantompdf | le | 9.2.0.9297 | |
| reader | le | 9.2.0.9297 |
Related
cvelist
cvelist
CVE-2018-3962
2018-10-01 00:00:00
nvd
nvd
CVE-2018-3962
2018-10-02 21:29:01
cve
cve
CVE-2018-3962
2018-10-02 21:29:01
talos
talos
kaspersky
kaspersky
KLA11326 Multiple vulnerabilities in Foxit Reader
2018-09-28 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
2018-10-01 09:59:00
checkpoint_advisories
checkpoint_advisories
openvas
openvas
Foxit PhantomPDF < 9.3 Multiple Vulnerabilities - Windows
2018-10-03 00:00:00
Foxit Reader < 9.3 Multiple Vulnerabilities - Windows
2018-10-03 00:00:00
nessus
nessus
Foxit Reader < 9.3 Multiple Vulnerabilities
2018-10-12 00:00:00
Foxit PhantomPDF < 8.3.8 Multiple Vulnerabilities
2018-11-30 00:00:00
Foxit PhantomPDF < 9.3 Multiple Vulnerabilities
2018-10-12 00:00:00