Lucene search
+L

3462 matches found

Talos
Talos
•added 2018/10/01 12:00 a.m.•527 views

Foxit PDF Reader JavaScript getPageNthWord remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS8.5AI score0.03155EPSS
SaveExploits1
Talos
Talos
•added 2018/10/01 12:00 a.m.•301 views

Foxit PDF Reader JavaScript field object signatureGetSeedValue remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.5AI score0.03039EPSS
SaveExploits1
Talos
Talos
•added 2018/10/01 12:00 a.m.•320 views

Foxit PDF Reader JavaScript this.bookmarkRoot.children remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.06043EPSS
SaveExploits1
Talos
Talos
•added 2018/10/01 12:00 a.m.•511 views

Foxit PDF Reader JavaScript Field object signatureInfo remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02577EPSS
SaveExploits0
Talos
Talos
•added 2018/10/01 12:00 a.m.•493 views

Foxit PDF Reader Javascript JSON.Stringify this.info Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.5AI score0.03197EPSS
SaveExploits1
CNVD
CNVD
•added 2018/09/25 12:00 a.m.•11 views

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/09/25 12:00 a.m.•8 views

Kingsoft pdf reader has a denial of service vulnerability

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/09/20 12:00 a.m.•11 views

PT-2018-16335 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine allows for arbitrary code execution when a specially crafted PDF document is opened, causing a previously freed object in memory to be...

8.8CVSS7.9AI score0.02577EPSS
SaveExploits0References11
OpenVAS
OpenVAS
•added 2018/09/18 12:00 a.m.•77 views

Microsoft Windows Multiple Vulnerabilities (KB4457142)

This host is missing a critical security update according to Microsoft KB4457142 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
SaveExploits21References3
NVD
NVD
•added 2018/09/13 12:29 a.m.•17 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS8AI score0.42575EPSS
SaveExploits0References4
Prion
Prion
•added 2018/09/13 12:29 a.m.•21 views

Remote code execution

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS7.8AI score0.42575EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2018/09/13 12:29 a.m.•8 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS6.7AI score0.42575EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2018/09/13 12:00 a.m.•28 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

7.8AI score0.42575EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/13 12:00 a.m.•3 views

CVE-2018-8464: Improper Restriction of Operations within the Bounds of a Memory Buffer

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS7.5AI score0.42575EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/09/12 12:00 a.m.•13 views

Microsoft Edge Code Execution Vulnerability

Microsoft Windows 10, among others, is an operating system released by Microsoft Corporation in the U.S. Edge is one of the default browsers that comes with the system. A remote code execution vulnerability exists in Microsoft Edge that stems from PDF Reader failing to properly handle objects in...

9.3CVSS8.6AI score0.42575EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/09/12 12:00 a.m.•106 views

Microsoft Windows Multiple Vulnerabilities (KB4457132)

This host is missing a critical security update according to Microsoft KB4457132 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
SaveExploits21References3
Exploit DB
Exploit DB
•added 2018/08/27 12:00 a.m.•208 views

Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

8.8CVSS7.1AI score0.63072EPSS
SaveExploits14
Packet Storm
Packet Storm
•added 2018/08/24 12:00 a.m.•244 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

6.8CVSS0.8AI score0.63072EPSS
SaveExploits14
zdt
zdt
•added 2018/08/24 12:00 a.m.•225 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free Exploit

Foxit PDF Reader version 9.0.1.1049 has a use-after-free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A RO...

6.8CVSS0.4AI score0.63072EPSS
SaveExploits14
CNVD
CNVD
•added 2018/08/09 12:00 a.m.•14 views

Foxit PDF Reader JavaScript Engine Memory Misreference Vulnerability (CNVD-2018-15096)

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A memory misreference vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.1.0.5096. An attacker could exploit this...

8.8CVSS8.2AI score0.02347EPSS
SaveExploits1References1
Rows per page
Query Builder