CVE-2018-3850
published 2018-04-23CVE-2018-3850: An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF…
PriorityP344high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
2.87%
85.3th percentile
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxit | pdf_reader | — | — |
| talos | foxit | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q248-6jpv-6wjh: An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9
ghsa_unreviewed·2022-05-13
CVE-2018-3850 [HIGH] CWE-416 GHSA-q248-6jpv-6wjh: An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If a browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Cisco
Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
vendor_cisco·2018-03-28·CVSS 8.6
CVE-2018-0177 [HIGH] CWE-19 Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition.
The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. If the switch d
Cisco
Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0177 Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
CVE-2018-0177: Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. If
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
blogs_talos·2018-04-19·CVSS 8.8
CVE-2017-14458 [HIGH] Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
### Overview Talos is disclosing five vulnerabilities in Foxit PDF Reader.Foxit PDF Readeris a popular free program for viewing, creating, and editing PDF documents. It is commonly used as an alternative to Adobe Acrobat Reader and has a widely used browser plugin available. Update to the current version ofFoxit PDF Reader.
### DetailsVulnerabilities Discovered by Aleksandar Nikolic
#### TALOS-2017-0506 TALOS-2017-0506 / CVE-2017-14458 in an exploitable use-after-free vulnerability that exists specifically in the JavaScript engine of Foxit PDF Reader. When executing embedded JavaScript code, a document can be closed, which essentially frees up a lot of used objects, but the JavaScript can continue to execute. Taking advantage of this, a specially crafted PDF document can trigger a previo
Talos
Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
blogs_talos·2018-04-19·CVSS 8.8
[HIGH] Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
## Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
## Overview Talos is disclosing five vulnerabilities in Foxit PDF Reader. Foxit PDF Reader is a popular free program for viewing, creating, and editing PDF documents. It is commonly used as an alternative to Adobe Acrobat Reader and has a widely used browser plugin available. Update to the current version of Foxit PDF Reader .
## Details Vulnerabilities Discovered by Aleksandar Nikolic
## TALOS-2017-0506 TALOS-2017-0506 / CVE-2017-14458 in an exploitable use-after-free vulnerability that exists specifically in the JavaScript engine of Foxit PDF Reader. When executing embedded JavaScript code, a document can be closed, which essentially frees up a lot of used objects, but the JavaScript can continue to execute. Taking advant
http://www.securityfocus.com/bid/103942http://www.securitytracker.com/id/1040733https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0532http://www.securityfocus.com/bid/103942http://www.securitytracker.com/id/1040733https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0532
2018-04-23
Published