CVE-2018-19418

Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control...

CVE-2018-19418

CVE-2018-19418 affects Foxit PDF ActiveX/SDK ActiveX prior to 5.5.1. Root cause: lack of security permission control leading to remote code execution via command injection. Exploitation notes vary across sources; SRC-2019-0009 indicates user interaction is required (user must open a malicious fil...