CVE-2018-14255

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14255

Foxit Reader 9.0.1.1049 is affected by a type confusion in getNthFieldName that enables remote code execution when a user opens a malicious page/file or interacts with JavaScript. The flaw allows code execution in the context of the current process and is associated with ZDI-6018. Mitigation per ...