CVE-2019-5031

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.4.1.16828

Description A memory corruption issue exists in the JavaScript engine, allowing arbitrary code execution through a specially crafted PDF document that triggers an out-of-memory condition. An attacker must trick the user into opening the malicious file. If the browser plugin extension is enabled, visiting a malicious site can also trigger the issue.

Recommendations For Foxit PDF Reader version 9.4.1.16828, consider disabling the JavaScript engine as a temporary workaround until a patch is available. Restrict access to malicious PDF documents and avoid visiting untrusted websites with the browser plugin extension enabled.