GCVE - cpe:2.3:a:foxitsoftware:foxit_reader:9.3.0.10826:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:foxitsoftware:foxit_reader:9.3.0.10826:*:*:*:*:*:*:*

part: a version: 9.3.0.10826 update: *

Vendor	Foxitsoftware (`432505a3-624b-5d0c-b6e3-841531927527`)
Product	Foxit Reader (`058768da-164a-5e12-a06d-4983e7214eaf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-19390`	vulnerable	2026-06-03 14:38:29.252899	Details available FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue. Published: 2018-11-20T21:00:00.000Z Updated: 2024-08-05T11:37:11.125Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19389`	vulnerable	2026-06-03 14:38:29.252604	Details available FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue. Published: 2018-11-20T21:00:00.000Z Updated: 2024-08-05T11:37:11.029Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19388`	vulnerable	2026-06-03 14:38:29.252291	Details available FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, access violation, and application crash) via TIFF data because of a ConvertToPDF_x86!ReleaseFXURLToHtml issue. Published: 2018-11-20T21:00:00.000Z Updated: 2024-08-05T11:37:11.115Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19348`	vulnerable	2026-06-03 14:38:29.207247	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x000000000012dff5" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-16T22:36:26.436Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08/ https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/08/2018/11/2018-11-08/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19347`	vulnerable	2026-06-03 14:38:29.206878	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11bb" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-16T19:04:29.623Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19346`	vulnerable	2026-06-03 14:38:29.206437	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11ea" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-16T23:47:02.595Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19345`	vulnerable	2026-06-03 14:38:29.206103	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at U3DBrowser!PlugInMain+0x0000000000053f8b" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-17T02:31:27.792Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19344`	vulnerable	2026-06-03 14:38:29.205777	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address may be used as a return value starting at U3DBrowser!PlugInMain+0x0000000000031a75" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-17T03:22:38.301Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19343`	vulnerable	2026-06-03 14:38:29.205461	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read), obtain sensitive information, or possibly have unspecified other impact via a U3D sample because of a "Data from Faulting Address controls Code Flow starting at U3DBrowser!PlugInMain+0x00000000000f43ff" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-17T02:32:44.222Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19342`	vulnerable	2026-06-03 14:38:29.205120	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x000000000000347a" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-16T16:42:46.738Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://github.com/Yan-1-20/Yan-1-20.github.io/tree/master/2018/11/08/2018/11/2018-11-08-2/index.html https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08-2/ https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19341`	vulnerable	2026-06-03 14:38:29.204743	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x0000000000087906" issue. Published: 2018-11-17T21:00:00.000Z Updated: 2024-09-16T23:55:51.189Z Open on db.gcve.eu Reference links https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18933`	vulnerable	2026-06-03 14:38:28.612184	Details available The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!safe_vsnprintf+0x00000000002c4330" issue. Published: 2018-11-05T08:00:00.000Z Updated: 2024-08-05T11:23:08.582Z Open on db.gcve.eu Reference links https://yan-1-20.github.io/2018/11/02/2018/11/2018-11-02/ https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/02/2018/11/2018-11-02/index.html https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18689`	vulnerable	2026-06-03 14:38:28.221612	Details available The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer, Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF, and Soda PDF Desktop. Published: 2021-01-07T17:59:16.000Z Updated: 2024-08-05T11:16:00.394Z Open on db.gcve.eu Reference links https://www.foxitsoftware.com/support/security-bulletins.php https://pdf-insecurity.org/signature/evaluation_2018.html https://pdf-insecurity.org/signature/signature.html https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Foxitsoftware Foxit Reader 9.3.0.10826

PURL mappings

Vulnerability references

Contribute