CVE-2019-13123

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

Design/Logic Flaw

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

Design/Logic Flaw

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 2 of 2...

CVE-2019-13124

CVE-2019-13124 affects Foxit Reader 9.6.0.25114 and earlier, due to two RecursiveCall bugs in the V8 JavaScript engine that cause uncontrolled recursion, exhausting stack memory in three functions. This is described as a denial of service/crash risk related to stack exhaustion. The connected docu...

CVE-2019-13124

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 2 of 2...

CVE-2019-13123

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

CVE-2019-13123

Foxit Reader (Windows) versions 9.6.0.25114 and earlier are affected by a denial-of-service due to two RecursiveCall bugs in the V8 JavaScript engine that exhaust stack memory via uncontrolled recursion (issue 1 of 2). The vulnerability is tied to the V8 engine within Foxit Reader and impacts the...

Vulnerability Spotlight: Foxit PDF Reader JavaScript Array.includes remote code execution vulnerability

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Foxit PDF Reader contains a remote code execution vulnerability in its JavaScript engine. Foxit aims to be one of the most feature-rich PDF readers on the market, and contains many similar functions to that of Adobe Acrobat Reader...

CVE-2019-13124: Uncontrolled Recursion

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 2 of 2...

CVE-2019-13123: Uncontrolled Recursion

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

PT-2019-13139

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 9.6.0.25114 and earlier Description The issue involves two unique RecursiveCall bugs in the V8 JavaScript engine, where 3 functions cause Uncontrolled Recursion, leading to exhaustion of available stack memory...

PT-2019-13138

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 9.6.0.25114 and earlier Description The issue involves two unique RecursiveCall bugs in the V8 JavaScript engine, where 3 functions cause Uncontrolled Recursion, leading to exhaustion of available stack memory...

PT-2019-17417

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.4.1.16828 Description A memory corruption issue exists in the JavaScript engine, allowing arbitrary code execution through a specially crafted PDF document that triggers an out-of-memory condition. An attacker must...

CVE-2019-11751

Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue...

PT-2019-3306

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted w...

PT-2019-3363

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. It may allow a remote attacker to execute arbitrary code or gain elevated privileges b...

PT-2019-3292

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted w...

PT-2019-3176

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code usi...

CVE-2019-11734

Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 69...

CVE-2019-11746

A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox 69, Thunderbird 68.1, Thunderbird 60.9, Firefox ESR 60.9, and Firefox ESR 68.1...