Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:foxit_pdf_reader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductFoxit Pdf Reader (eb558a93-eac4-5f5c-b3cd-7480bf978cab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3962 vulnerable 2026-06-03 14:38:50.657334 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the CreationDate property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-16T22:19:58.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3961 vulnerable 2026-06-03 14:38:50.656893 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-17T01:21:24.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3960 vulnerable 2026-06-03 14:38:50.656392 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-16T23:26:04.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3959 vulnerable 2026-06-03 14:38:50.655993 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-16T18:44:44.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3958 vulnerable 2026-06-03 14:38:50.655589 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Subject property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-17T03:55:01.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3957 vulnerable 2026-06-03 14:38:50.655178 Details available
HIGH (8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-17T03:49:21.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3944 vulnerable 2026-06-03 14:38:50.631076 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-17T01:51:32.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3943 vulnerable 2026-06-03 14:38:50.630577 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-02T21:00:00.000Z
Updated: 2024-09-16T22:52:14.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.