10860 matches found
Foxit PDF SDK ActiveX License Issue Vulnerability
Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from a lack o...
Exploit for CVE-2019-0888
CVE-2019-0888 PoC for CVE-2019-0888 - Us...
The vulnerability of the application programming interface for accessing ActiveX Data Objects in Windows operating systems arises from errors in object handling in memory, allowing attackers to execute arbitrary code.
The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Foxit PDF SDK ActiveX Command Injection Vulnerability (CNVD-2019-21955)
Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. A command injection vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. The...
Foxit PDF SDK ActiveX File Write Vulnerability
Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. Foxit PDF SDK ActiveX 5.5.0 and earlier versions in the use of JavaScript API Doc.exportAsFDF file...
CVE-2018-19444
A use after free in the TextBox field Validate action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free locatio...
CVE-2018-19445
A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19449
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19444
A use after free in the TextBox field Validate action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free locatio...
CVE-2018-19449
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19446
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19448
In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...
CVE-2018-19447
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution...
Stack overflow
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution...
Command injection
A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution...
Command injection
A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...
Remote code execution
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19444
CVE-2018-19444 describes a use-after-free in the TextBox Validate action of IReader_ContentProvider within Foxit Reader SDK ActiveX Professional 5.4.0.1031. Exploitation via specially crafted PDFs can lead to remote code execution. The Red Hat and CVE mappings note this vulnerability is distinct ...
CVE-2018-19445
CVE-2018-19445 affects Foxit Reader SDK ActiveX Pro (5.4.0.1031) where the JavaScript API app.launchURL can be abused to inject commands, enabling remote code execution. The root cause is insufficient validation of user-supplied strings before executing them via a system call in the ActiveX compo...
CVE-2018-19446
CVE-2018-19446 affects Foxit Reader SDK ActiveX Pro (5.4.0.1031). The vulnerability lies in the JavaScript API Doc.createDataObject, which can cause a File Write when processing specially crafted PDFs, enabling remote code execution. According to the connected SRCINCITE entry, exploitation requir...