Lucene search
K

610 matches found

Talos
Talos
added 2020/12/09 12:0 a.m.115 views

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

8.8CVSS9AI score0.01021EPSS
Exploits1
Talos
Talos
added 2020/12/09 12:0 a.m.89 views

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS9.2AI score0.14029EPSS
Exploits1
Talos
Talos
added 2020/12/09 12:0 a.m.44 views

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.7AI score0.25714EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:0 a.m.271 views

Adobe Flash Player <= 32.0.0.371 (APSB20-30)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.371. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the...

10CVSS9.2AI score0.08341EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/06/09 12:0 a.m.111 views

KB4561600: Security update for Adobe Flash Player (June 2020)

The remote Windows host is missing security update KB4561600. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the context of the user. C Tenable Network Security, In...

10CVSS8.8AI score0.08341EPSS
Exploits0References3
NVD
NVD
added 2020/01/16 10:15 p.m.12 views

CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS8.8AI score0.08485EPSS
Exploits1References1
NVD
NVD
added 2020/01/16 10:15 p.m.14 views

CVE-2019-5145

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.8AI score0.08485EPSS
Exploits1References1
NVD
NVD
added 2020/01/16 10:15 p.m.10 views

CVE-2019-5126

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.8AI score0.04604EPSS
Exploits1References1
OSV
OSV
added 2020/01/16 10:15 p.m.1 views

CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS7.4AI score0.08485EPSS
Exploits1References1
Prion
Prion
added 2020/01/16 10:15 p.m.18 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

6.8CVSS8.8AI score0.04604EPSS
Exploits1References1Affected Software2
Prion
Prion
added 2020/01/16 10:15 p.m.12 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

6.8CVSS8.8AI score0.08485EPSS
Exploits1References1Affected Software2
Prion
Prion
added 2020/01/16 10:15 p.m.11 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick th...

6.8CVSS8.8AI score0.03867EPSS
Exploits1References1Affected Software2
AlpineLinux
AlpineLinux
added 2020/01/16 10:1 p.m.13 views

CVE-2019-5145

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS7.3AI score0.08485EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/01/16 10:1 p.m.21 views

CVE-2019-5145

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.8AI score0.08485EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2020/01/16 10:0 p.m.12 views

CVE-2019-5130

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick th...

8.8CVSS7.3AI score0.03867EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/01/16 10:0 p.m.18 views

CVE-2019-5130

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick th...

8CVSS8.8AI score0.03867EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2020/01/16 9:59 p.m.20 views

CVE-2019-5126

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS7.3AI score0.04604EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/01/16 9:59 p.m.21 views

CVE-2019-5126

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.8AI score0.04604EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/01/16 9:55 p.m.17 views

CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS8.8AI score0.08485EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2020/01/16 9:55 p.m.12 views

CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS7.3AI score0.08485EPSS
Exploits1References1
Rows per page
Query Builder