A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0628 | Third Party Advisory |
https://www.foxitsoftware.com/support/security-bulletins.php | Vendor Advisory Patch |
Configurations
Configuration 1 (hide)
AND |
|
History
19 Apr 2022, 18:15
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.foxitsoftware.com/support/security-bulletins.php - Vendor Advisory, Patch |
Information
Published : 2018-10-02 21:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-3959
Mitre link : CVE-2018-3959
CVE.ORG link : CVE-2018-3959
JSON object : View
Products Affected
foxitsoftware
- reader
- phantompdf
microsoft
- windows
CWE
CWE-416
Use After Free