CVE-2018-19447: Out-of-bounds Write

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution...

PT-2019-9817

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX version 5.4.0.1031 Description A command injection issue can occur when parsing a launch action in specially crafted PDF files, potentially allowing an attacker to gain remote code execution. Recommendations For Foxit...

PT-2019-9812

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description The issue allows a File Write to occur for specially crafted PDF files when the JavaScript API Doc.createDataObject is used. This can be leveraged by an attacker to gain remo...

PT-2019-9815

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description The issue allows a File Write to occur for specially crafted PDF files when the JavaScript API Doc.exportAsFDF is used. This can be leveraged by an attacker to gain remote co...

CVE-2018-19445: Improper Neutralization of Special Elements used in a Command

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

CVE-2018-19448: Out-of-bounds Write

In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...

CVE-2018-19450: Improper Neutralization of Special Elements used in a Command

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution...

PT-2019-9814

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description The issue arises from an uninitialized object in the IReader ContentProvider::GetDocEventHandler function when the control is embedded into Office documents. This can be...

CVE-2018-19446: Incorrect Permission Assignment for Critical Resource

A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...

CVE-2018-19449: Out-of-bounds Write

A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution...

CVE-2018-19444: Use After Free

A use after free in the TextBox field Validate action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free locatio...

PT-2019-9811

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A command injection issue can occur when processing specially crafted PDF files, allowing an attacker to potentially gain remote code execution. This issue is related to the...

PT-2019-9813

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX version 5.4.0.1031 Description A stack-based buffer overflow issue exists when parsing specially crafted PDF files, potentially allowing an attacker to gain remote code execution. Recommendations For Foxit Reader SDK...

CVE-2018-19451: Improper Neutralization of Special Elements used in a Command

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution...

PT-2019-9810

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A use after free issue in the TextBox field Validate action in IReader ContentProvider can be triggered by specially crafted PDF files, potentially allowing an attacker to...

CVE-2018-19452: Use After Free

A use after free in the TextBox field Mouse Enter action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free...

PT-2019-9819

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A use after free issue in the TextBox field Mouse Enter action in IReader ContentProvider can be triggered by specially crafted PDF files, potentially allowing an attacker to...

PT-2019-9818

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A command injection issue can occur when processing specially crafted PDF files using the Open File action on a Field, potentially allowing an attacker to achieve remote code...

SRC-2019-0005 : Foxit Reader SDK ActiveX Pro createDataObject File Write Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader SDK ActiveX Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

SRC-2019-0010 : Foxit Reader SDK ActiveX URI Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader SDK ActiveX Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...