4 matches found
CVE-2019-5126
CVE-2019-5126 affects Foxit PDF Reader (and related Foxit products) with an exploitable use-after-free in the JavaScript engine of Foxit Reader 9.7.0.29435. A specially crafted PDF can trigger a freed object reuse, enabling arbitrary code execution. Attack requires user action to open the malicio...
CVE-2019-5145
CVE-2019-5145 describes an exploitable use-after-free in the Foxit PDF Reader JavaScript engine (version 9.7.0.29435). The vulnerability occurs when a crafted PDF triggers reuse of a freed object, enabling arbitrary code execution. Impact is arbitrary code execution with high severity (per CVSS a...
CVE-2019-5131
Foxit PDF Reader (Foxit Reader) is affected by a use-after-free vulnerability in the JavaScript engine for version 9.7.0.29435 (and possibly earlier per advisories). A specially crafted PDF can trigger reuse of a previously freed object, enabling arbitrary code execution. Exploitation requires th...
CVE-2019-5130
CVE-2019-5130 is a use-after-free vulnerability in Foxit PDF Reader (JavaScript engine). Multiple connected sources (Talos: Foxit PDF Reader 9.7.0.29435; Red Hat/NVD: same code path) describe that a crafted PDF can trigger a freed object to be reused, enabling arbitrary code execution. The vulner...