Foxit Software PDF Reader 8.3.2.25013

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_reader:8.3.2.25013:*:*:*:*:*:*:*

part: a version: 8.3.2.25013 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Reader (e9c9f198-a64d-5586-91d0-9e5c428b0da1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14458 vulnerable 2026-06-03 14:36:39.258851 Details available
HIGH (8.8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-04-23T15:00:00.000Z
Updated: 2024-09-16T23:00:32.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.