Lucene search
K

3046 matches found

Talos
Talos
added 2018/10/01 12:0 a.m.286 views

Foxit PDF Reader JavaScript field object signatureGetSeedValue remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.5AI score0.00703EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.498 views

Foxit PDF Reader JavaScript getPageRotation remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.00709EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.513 views

Foxit PDF Reader JavaScript getPageBox remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.00709EPSS
Exploits0
Talos
Talos
added 2018/10/01 12:0 a.m.282 views

Foxit PDF Reader JavaScript this.dataObjects remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.50108EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.309 views

Foxit PDF Reader JavaScript this.bookmarkRoot.children remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.50108EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.304 views

Foxit PDF Reader JavaScript this.info multiple remote code execution vulnerabilities

Summary A total of six separate use-after-free vulnerabilities exist in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker...

8CVSS8.1AI score0.0022EPSS
Exploits0
Talos
Talos
added 2018/10/01 12:0 a.m.502 views

Foxit PDF Reader Javascript removeDataObject Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.07272EPSS
Exploits1
CNVD
CNVD
added 2018/09/25 12:0 a.m.2 views

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

6.8AI score
Exploits0
CNVD
CNVD
added 2018/09/25 12:0 a.m.1 views

Kingsoft pdf reader has a denial of service vulnerability

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2018/09/20 12:0 a.m.2 views

PT-2018-16335 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine allows for arbitrary code execution when a specially crafted PDF document is opened, causing a previously freed object in memory to be...

8.8CVSS7.9AI score0.00709EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2018/09/18 12:0 a.m.59 views

Microsoft Windows Multiple Vulnerabilities (KB4457142)

This host is missing a critical security update according to Microsoft KB4457142 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.85092EPSS
Exploits16References3
NVD
NVD
added 2018/09/13 12:29 a.m.11 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS8AI score0.55707EPSS
Exploits0References4
Prion
Prion
added 2018/09/13 12:29 a.m.17 views

Remote code execution

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS7.8AI score0.55707EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.5 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS6.7AI score0.55707EPSS
Exploits0References6
Cvelist
Cvelist
added 2018/09/13 12:0 a.m.15 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

7.8AI score0.55707EPSS
Exploits0References4
CNVD
CNVD
added 2018/09/12 12:0 a.m.3 views

Microsoft Edge Code Execution Vulnerability

Microsoft Windows 10, among others, is an operating system released by Microsoft Corporation in the U.S. Edge is one of the default browsers that comes with the system. A remote code execution vulnerability exists in Microsoft Edge that stems from PDF Reader failing to properly handle objects in...

9.3CVSS8.6AI score0.55707EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/09/12 12:0 a.m.77 views

Microsoft Windows Multiple Vulnerabilities (KB4457132)

This host is missing a critical security update according to Microsoft KB4457132 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.85092EPSS
Exploits16References3
Exploit DB
Exploit DB
added 2018/08/27 12:0 a.m.194 views

Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/08/24 12:0 a.m.231 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

6.8CVSS0.8AI score0.87256EPSS
Exploits13
0day.today
0day.today
added 2018/08/24 12:0 a.m.192 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free Exploit

Foxit PDF Reader version 9.0.1.1049 has a use-after-free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A RO...

6.8CVSS0.4AI score0.87256EPSS
Exploits13
Rows per page
Query Builder