Foxitsoftware Foxit Reader 9.0.1.31049
Approved changes feed: RSS · Atom
cpe:2.3:a:foxitsoftware:foxit_reader:9.0.1.1049:*:*:*:*:*:*:*
part: a version: 9.0.1.1049 update: *
| Vendor | Foxitsoftware (432505a3-624b-5d0c-b6e3-841531927527) |
|---|---|
| Product | Foxit Reader (058768da-164a-5e12-a06d-4983e7214eaf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3853 |
vulnerable | 2026-06-03 14:38:50.526743 |
Details available
HIGH (8.8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-06-04T20:00:00.000Z
Updated: 2024-09-17T02:57:04.382Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3843 |
vulnerable | 2026-06-03 14:38:50.512839 |
Details available
MEDIUM (6.5)
An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document can lead to an object of invalid type to be dereferenced, which can potentially lead to sensitive memory disclosure, and possibly to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-04-19T19:00:00.000Z
Updated: 2024-09-17T00:20:46.489Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3842 |
vulnerable | 2026-06-03 14:38:50.512225 |
Details available
HIGH (8.8)
An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can lead to a dereference of an uninitialized pointer which, if under attacker control, can result in arbitrary code execution. An attacker needs to trick the user to open a malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-04-19T19:00:00.000Z
Updated: 2024-09-17T00:06:32.085Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.