PT-2018-14932

CVE-2018-19348

·

Published

2018-11-17

·

Updated

2018-12-18

Description by

CVSS 3.1
7.1
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.3.0.10826
Description The issue allows remote attackers to cause a denial of service or obtain sensitive information via a U3D sample. This is due to a problem where "Data from Faulting Address controls Branch Selection" in the U3DBrowser plugin.
Recommendations For Foxit Reader version 9.3.0.10826, consider disabling the U3D plugin to minimize the risk of exploitation until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾