Lucene search
+L

3080 matches found

Talos
Talos
added 2018/10/01 12:00 a.m.297 views

Foxit PDF Reader JavaScript field object signatureGetSeedValue remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.5AI score0.03039EPSS
SaveExploits1
CNVD
CNVD
added 2018/09/25 12:00 a.m.6 views

Kingsoft pdf reader has a denial of service vulnerability

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2018/09/25 12:00 a.m.9 views

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/09/20 12:00 a.m.9 views

PT-2018-16335 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine allows for arbitrary code execution when a specially crafted PDF document is opened, causing a previously freed object in memory to be...

8.8CVSS7.9AI score0.02577EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2018/09/18 12:00 a.m.67 views

Microsoft Windows Multiple Vulnerabilities (KB4457142)

This host is missing a critical security update according to Microsoft KB4457142 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
SaveExploits21References3
NVD
NVD
added 2018/09/13 12:29 a.m.17 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS8AI score0.42575EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2018/09/13 12:29 a.m.7 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS6.7AI score0.42575EPSS
SaveExploits0References6
Prion
Prion
added 2018/09/13 12:29 a.m.21 views

Remote code execution

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

9.3CVSS7.8AI score0.42575EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2018/09/13 12:00 a.m.26 views

CVE-2018-8464

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

7.8AI score0.42575EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2018/09/12 12:00 a.m.85 views

Microsoft Windows Multiple Vulnerabilities (KB4457132)

This host is missing a critical security update according to Microsoft KB4457132 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.69019EPSS
SaveExploits21References3
CNVD
CNVD
added 2018/09/12 12:00 a.m.11 views

Microsoft Edge Code Execution Vulnerability

Microsoft Windows 10, among others, is an operating system released by Microsoft Corporation in the U.S. Edge is one of the default browsers that comes with the system. A remote code execution vulnerability exists in Microsoft Edge that stems from PDF Reader failing to properly handle objects in...

9.3CVSS8.6AI score0.42575EPSS
SaveExploits0References1
Exploit DB
Exploit DB
added 2018/08/27 12:00 a.m.202 views

Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

8.8CVSS7.1AI score0.63689EPSS
SaveExploits13
Packet Storm
Packet Storm
added 2018/08/24 12:00 a.m.241 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Foxit PDF Reader Pointer Overwrite UAF', 'Description' = %q Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotatio...

6.8CVSS0.8AI score0.63689EPSS
SaveExploits13
zdt
zdt
added 2018/08/24 12:00 a.m.216 views

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free Exploit

Foxit PDF Reader version 9.0.1.1049 has a use-after-free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A RO...

6.8CVSS0.4AI score0.63689EPSS
SaveExploits13
CNVD
CNVD
added 2018/08/09 12:00 a.m.9 views

Foxit PDF Reader JavaScript Engine Memory Misreference Vulnerability (CNVD-2018-15096)

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A memory misreference vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.1.0.5096. An attacker could exploit this...

8.8CVSS8.2AI score0.02347EPSS
SaveExploits1References1
Prion
Prion
added 2018/08/01 8:29 p.m.17 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

6.8CVSS7.9AI score0.4414EPSS
SaveExploits1References2Affected Software2
NVD
NVD
added 2018/08/01 8:29 p.m.25 views

CVE-2018-3924

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

8.8CVSS8.8AI score0.4414EPSS
SaveExploits1References2
NVD
NVD
added 2018/08/01 8:29 p.m.38 views

CVE-2018-3939

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

8.8CVSS8.2AI score0.02347EPSS
SaveExploits1References2
Prion
Prion
added 2018/08/01 8:29 p.m.22 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

6.8CVSS8.8AI score0.02347EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2018/08/01 8:00 p.m.44 views

CVE-2018-3939

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

8CVSS8.8AI score0.02347EPSS
SaveExploits1References1
Rows per page
Query Builder