foxit_pdf_sdk_activex Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxit_pdf_sdk_activex/ Sun, 26 Feb 2023 06:48:10 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png foxit_pdf_sdk_activex Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxit_pdf_sdk_activex/ 32 32 CVE-2018-19448 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19448/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19448/ In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.

The post CVE-2018-19448 appeared first on CVE Vulnerability.

]]> In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.

The post CVE-2018-19448 appeared first on CVE Vulnerability.

]]> CVE-2018-19449 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19449/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19449/ A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19449 appeared first on CVE Vulnerability.

]]> A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19449 appeared first on CVE Vulnerability.

]]> CVE-2018-19450 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19450/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19450/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19450 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19450 appeared first on CVE Vulnerability.

]]> CVE-2018-19451 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19451/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19451/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19451 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19451 appeared first on CVE Vulnerability.

]]> CVE-2018-19452 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19452/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19452/ A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19452 appeared first on CVE Vulnerability.

]]> A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19452 appeared first on CVE Vulnerability.

]]> CVE-2018-19444 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19444/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19444/ A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19444 appeared first on CVE Vulnerability.

]]> A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19444 appeared first on CVE Vulnerability.

]]> CVE-2018-19445 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19445/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19445/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19445 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19445 appeared first on CVE Vulnerability.

]]> CVE-2018-19446 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19446/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19446/ A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19446 appeared first on CVE Vulnerability.

]]> A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19446 appeared first on CVE Vulnerability.

]]> CVE-2018-19447 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19447/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19447/ A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19447 appeared first on CVE Vulnerability.

]]> A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19447 appeared first on CVE Vulnerability.

]]>