Approved changes feed: RSS · Atom
cpe:2.3:a:foxit:foxit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Foxit (3778a6df-af29-5bee-a995-959672e13d77) |
|---|---|
| Product | Foxit (6b489980-394c-5be3-a448-dbdaa1b01c71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3956 |
vulnerable | 2026-06-03 14:38:50.654755 |
Details available
MEDIUM (6.8)
An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when coupled with another vulnerability. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2019-01-30T22:00:00.000Z
Updated: 2024-09-16T23:16:51.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3939 |
vulnerable | 2026-06-03 14:38:50.621908 |
Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-08-01T20:00:00.000Z
Updated: 2024-09-16T23:36:30.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3924 |
vulnerable | 2026-06-03 14:38:50.593442 |
Details available
HIGH (8.8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-08-01T20:00:00.000Z
Updated: 2024-09-17T02:36:25.121Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.