PT-2018-14927

CVE-2018-19343

·

Published

2018-11-17

·

Updated

2018-12-18

Description by

CVSS 3.1
7.1
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.3.0.10826
Description The issue allows remote attackers to cause a denial of service, obtain sensitive information, or possibly have unspecified other impact via a U3D sample. This is due to a "Data from Faulting Address controls Code Flow starting at U3DBrowser!PlugInMain+0x00000000000f43ff" issue in the u3d plugin.
Recommendations For Foxit Reader version 9.3.0.10826, update to a newer version that contains a fix for this issue to prevent potential exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾