Foxit Reader Use After Free (CVE-2018-14304; CVE-2018-14300; CVE-2018-17682; CVE-2018-3924)

A use after free vulnerability exists in Foxit Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2018-14300

CVE-2018-14300 describes a remote code execution vulnerability in Foxit Reader caused by a use-after-free in the handling of Polygon annotations. The flaw reuses a freed pointer during document element processing, enabling an attacker to run arbitrary code in the victim process when a user opens ...