foxit pdf sdk activex vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a di...

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a...

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

Foxitsoftware Foxit Pdf Sdk Activex

6.8

CVSSv2

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 up to and including 5.0.1820 prior to 5.0.2.924 allows remote malicious users to execute arbitrary code via a long string, related to global variables.

Foxitsoftware Foxit Pdf Sdk Activex 2.3 Foxitsoftware Foxit Pdf Sdk Activex 3.0 Foxitsoftware Foxit Pdf Sdk Activex 4.0 Foxitsoftware Foxit Pdf Sdk Activex 5.0.0 Foxitsoftware Foxit Pdf Sdk Activex 5.0.1.820

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook