Lucene search
K

3046 matches found

Talos
Talos
added 2018/10/01 12:0 a.m.495 views

Foxit PDF Reader JavaScript page change remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.4AI score0.02848EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.485 views

Foxit PDF Reader JavaScript field object isDefaultChecked remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.03155EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.501 views

Foxit PDF Reader JavaScript this.event.target Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.06219EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.496 views

Foxit PDF Reader Javascript Optional Content Group Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.4AI score0.03155EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.483 views

Foxit PDF Reader Javascript JSON.Stringify this.info Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.5AI score0.03197EPSS
Exploits1
Talos
Talos
added 2018/10/01 12:0 a.m.497 views

Foxit PDF Reader JavaScript Field object signatureInfo remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02577EPSS
Exploits0
Talos
Talos
added 2018/10/01 12:0 a.m.513 views

Foxit PDF Reader JavaScript getPageBox remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02577EPSS
Exploits0
CNVD
CNVD
added 2018/09/25 12:0 a.m.1 views

Kingsoft pdf reader has a denial of service vulnerability

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
Exploits0
CNVD
CNVD
added 2018/09/25 12:0 a.m.4 views

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2018/09/20 12:0 a.m.2 views

PT-2018-16335 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine allows for arbitrary code execution when a specially crafted PDF document is opened, causing a previously freed object in memory to be...

8.8CVSS7.9AI score0.02577EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2018/09/18 12:0 a.m.60 views

Microsoft Windows Multiple Vulnerabilities (KB4457142)

This host is missing a critical security update according to Microsoft KB4457142 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
Exploits16References3
NVD
NVD
added 2018/09/13 12:29 a.m.12 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS8AI score0.42575EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.5 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS6.7AI score0.42575EPSS
Exploits0References6
Prion
Prion
added 2018/09/13 12:29 a.m.18 views

Remote code execution

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS7.8AI score0.42575EPSS
Exploits0References4
Cvelist
Cvelist
added 2018/09/13 12:0 a.m.15 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

7.8AI score0.42575EPSS
Exploits0References4
CNVD
CNVD
added 2018/09/12 12:0 a.m.3 views

Microsoft Edge Code Execution Vulnerability

Microsoft Windows 10, among others, is an operating system released by Microsoft Corporation in the U.S. Edge is one of the default browsers that comes with the system. A remote code execution vulnerability exists in Microsoft Edge that stems from PDF Reader failing to properly handle objects in...

9.3CVSS8.6AI score0.42575EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/09/12 12:0 a.m.77 views

Microsoft Windows Multiple Vulnerabilities (KB4457132)

This host is missing a critical security update according to Microsoft KB4457132 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
Exploits16References3
Exploit DB
Exploit DB
added 2018/08/27 12:0 a.m.195 views

Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

7.4AI score
Exploits0
0day.today
0day.today
added 2018/08/24 12:0 a.m.210 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free Exploit

Foxit PDF Reader version 9.0.1.1049 has a use-after-free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A RO...

6.8CVSS0.4AI score0.64074EPSS
Exploits13
Packet Storm
Packet Storm
added 2018/08/24 12:0 a.m.231 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

6.8CVSS0.8AI score0.64074EPSS
Exploits13
Rows per page
Query Builder